file[.]exe | Triage™

General

Target
file.exe
Size 176KB
Sample230124-ra17faca73
SHA256 ec4b8c7407dce9428bfe6752b90cfd9dafe91d83e238102bf310c6deaeb21a01
MD5 297411e75bb6197050b1561200c9cbe7
SHA1 42266b2364bc8c2b773592382677770ffacdca0f
SHA512 f1597fc3ee3a29db25fa39905fedb35c591a709e32ae15f1492673fe5f52676a4464164ab49c9258500d8e3e555546fe8a2708e8c37cd4e1b3365239a8018f3b
SSDEEP 3072:+BN2XJeaLW4pdEb5Yy92qfdQ2YjoBavs+xD3gUfhUHdD:S6LPpdE79nYXvB3+d
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 176KB

file.exe

IMPHASH e24edfc2e5005495b46610eb617a2b17
SHA256 ec4b8c7407dce9428bfe6752b90cfd9dafe91d83e238102bf310c6deaeb21a01
MD5 297411e75bb6197050b1561200c9cbe7
SHA1 42266b2364bc8c2b773592382677770ffacdca0f
SHA512 f1597fc3ee3a29db25fa39905fedb35c591a709e32ae15f1492673fe5f52676a4464164ab49c9258500d8e3e555546fe8a2708e8c37cd4e1b3365239a8018f3b
SSDEEP 3072:+BN2XJeaLW4pdEb5Yy92qfdQ2YjoBavs+xD3gUfhUHdD:S6LPpdE79nYXvB3+d
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23126

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesA CreateMutexW GetLastError LoadLibraryW GetCommMask LocalUnlock GetUserDefaultLangID TerminateThread GlobalFlags FileTimeToLocalFileTime GetConsoleAliasesLengthW GetVolumePathNameW InterlockedCompareExchange SetVolumeMountPointA lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA FileTimeToDosDateTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsW VerifyVersionInfoW FindNextFileA GetConsoleAliasW FreeLibraryAndExitThread CreateFileA GetModuleHandleA LoadLibraryA CloseHandle MoveFileA DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

gdi32

GetBrushOrgEx GetCharWidthA

winhttp

WinHttpReadData

msimg32

TransparentBlt

Sharing