file[.]exe | Triage™

General

Target
file.exe
Size 175KB
Sample230124-qdr79sbe34
SHA256 7eeaa1acd2bb4b5162923958339812e3e2c84f682891c8424b7818f6cf20d068
MD5 5209fa94f42535853436dc1ba4c06595
SHA1 ba32b047b9d46f616b0d86724f55e91902bbc577
SHA512 54b9207d344924e4ad2cc4c15405ba9754bf8203dbb841b16da17f5f1b4be4a89a17ad87b66164cf2bc82ec81dd1157e5453ce01e5d3a3c05194118f539d5afb
SSDEEP 3072:4BN2h0FcV9LsS5n5GlFbb4wOU/RyhilXQbWFFJwK0M:gc9LsS5oFX4wl5DgbWrJwK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 175KB

file.exe

IMPHASH e874c21e93c8af101ec3f6531c2eb69d
SHA256 7eeaa1acd2bb4b5162923958339812e3e2c84f682891c8424b7818f6cf20d068
MD5 5209fa94f42535853436dc1ba4c06595
SHA1 ba32b047b9d46f616b0d86724f55e91902bbc577
SHA512 54b9207d344924e4ad2cc4c15405ba9754bf8203dbb841b16da17f5f1b4be4a89a17ad87b66164cf2bc82ec81dd1157e5453ce01e5d3a3c05194118f539d5afb
SSDEEP 3072:4BN2h0FcV9LsS5n5GlFbb4wOU/RyhilXQbWFFJwK0M:gc9LsS5oFX4wl5DgbWrJwK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22870

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesA CreateMutexW GetLastError LoadLibraryW GetCommMask LocalUnlock GetUserDefaultLangID TerminateThread GlobalFlags CreateFileA GetConsoleAliasesLengthW GetVolumePathNameW InterlockedCompareExchange FindVolumeMountPointClose lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA DosDateTimeToFileTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressA GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsW VerifyVersionInfoW FindNextFileA GetConsoleAliasW FreeLibraryAndExitThread GetTempFileNameA GetModuleHandleA LoadLibraryA CloseHandle MoveFileA DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

gdi32

GetBrushOrgEx GetCharWidthA

winhttp

WinHttpReadData

msimg32

AlphaBlend

Sharing