file[.]exe | Triage™

General

Target
file.exe
Size 175KB
Sample230124-s5cm1acd45
SHA256 4785ae71a0593d04da7eba96ff22eac9ac95794a61e8a2142a8c4dbcc26a0f17
MD5 89b26aff7f79d236c531bbbfaf287a83
SHA1 bb8237b3a19a632407bca1dfd1c81c04c574ac04
SHA512 c38ef3ee1a54d8419678b208653c1a2bd1cca788fc7a7d9b910ee2b68a3b3b36e261e42a199ec42fae4876ec62076b4dbd6afd98d6f5af07945593702c442c65
SSDEEP 3072:QBN2VUdyLHTnhx35poDkuhtYPbHy75QaPycyNUDdUr3J/IpxU:4KLHTnhx4LcHMQaU+UFix
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 175KB

file.exe

IMPHASH e24edfc2e5005495b46610eb617a2b17
SHA256 4785ae71a0593d04da7eba96ff22eac9ac95794a61e8a2142a8c4dbcc26a0f17
MD5 89b26aff7f79d236c531bbbfaf287a83
SHA1 bb8237b3a19a632407bca1dfd1c81c04c574ac04
SHA512 c38ef3ee1a54d8419678b208653c1a2bd1cca788fc7a7d9b910ee2b68a3b3b36e261e42a199ec42fae4876ec62076b4dbd6afd98d6f5af07945593702c442c65
SSDEEP 3072:QBN2VUdyLHTnhx35poDkuhtYPbHy75QaPycyNUDdUr3J/IpxU:4KLHTnhx4LcHMQaU+UFix
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23126

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesA CreateMutexW GetLastError LoadLibraryW GetCommMask LocalUnlock GetUserDefaultLangID TerminateThread GlobalFlags FileTimeToLocalFileTime GetConsoleAliasesLengthW GetVolumePathNameW InterlockedCompareExchange SetVolumeMountPointA lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA FileTimeToDosDateTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsW VerifyVersionInfoW FindNextFileA GetConsoleAliasW FreeLibraryAndExitThread CreateFileA GetModuleHandleA LoadLibraryA CloseHandle MoveFileA DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

gdi32

GetBrushOrgEx GetCharWidthA

winhttp

WinHttpReadData

msimg32

TransparentBlt

Sharing