file[.]exe | Triage™

General

Target
file.exe
Size 178KB
Sample230124-mrnkfsca8t
SHA256 4c5d87c5b314b5842c68e200f8b7cffb4f1dc90f4be0dc19f366ddaf75946d48
MD5 050874c82a3582dd9b63ba39eccf3665
SHA1 432f06d51a739b412fb774c7d6a63a0c52e4fed6
SHA512 be5006e3badf1a870f550321793d86d9082ea05c0c40b999082739da4f6e41b97eb8e7d4fcbaa23262f33e29dec056b8bddc5313929fcbaf0562467233ae7576
SSDEEP 3072:CBN2A5NoALHWsQQZ5rdstX/9pzeDgLFvbkJGovTRKWg:2HrLHWsJqzU8JzkJG2K
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 178KB

file.exe

IMPHASH e874c21e93c8af101ec3f6531c2eb69d
SHA256 4c5d87c5b314b5842c68e200f8b7cffb4f1dc90f4be0dc19f366ddaf75946d48
MD5 050874c82a3582dd9b63ba39eccf3665
SHA1 432f06d51a739b412fb774c7d6a63a0c52e4fed6
SHA512 be5006e3badf1a870f550321793d86d9082ea05c0c40b999082739da4f6e41b97eb8e7d4fcbaa23262f33e29dec056b8bddc5313929fcbaf0562467233ae7576
SSDEEP 3072:CBN2A5NoALHWsQQZ5rdstX/9pzeDgLFvbkJGovTRKWg:2HrLHWsJqzU8JzkJG2K
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22870

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesA CreateMutexW GetLastError LoadLibraryW GetCommMask LocalUnlock GetUserDefaultLangID TerminateThread GlobalFlags CreateFileA GetConsoleAliasesLengthW GetVolumePathNameW InterlockedCompareExchange FindVolumeMountPointClose lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA DosDateTimeToFileTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressA GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsW VerifyVersionInfoW FindNextFileA GetConsoleAliasW FreeLibraryAndExitThread GetTempFileNameA GetModuleHandleA LoadLibraryA CloseHandle MoveFileA DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

gdi32

GetBrushOrgEx GetCharWidthA

winhttp

WinHttpReadData

msimg32

AlphaBlend

Sharing