file[.]exe | Triage™

General

Target
file.exe
Size 176KB
Sample230124-t64csacf79
SHA256 74b86eed28104c9f459d08d48044192745239f643d8896892acf46ce60deb3fc
MD5 412910fbbe122dbc56496e41a8b72b54
SHA1 8a5f50d644c56702b7edb16ee368a64bef7aea24
SHA512 6f69dc1e2c357eaf2f47258b30e84ee2d80579ad1ea145b2385995c6a257ec8ddf5efb3608e77724c16f9a9b936c46b205b0133a3e141b1b84c2f9e8072da66d
SSDEEP 3072:ABN2XdPtLzQWbQ5p8F69mKG5DdWNNO/pOdj0V/E0PVPVGss:oYLMWbNPR+lE/3fG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 176KB

file.exe

IMPHASH c714bcf78eb81138b685e33decc27dc8
SHA256 74b86eed28104c9f459d08d48044192745239f643d8896892acf46ce60deb3fc
MD5 412910fbbe122dbc56496e41a8b72b54
SHA1 8a5f50d644c56702b7edb16ee368a64bef7aea24
SHA512 6f69dc1e2c357eaf2f47258b30e84ee2d80579ad1ea145b2385995c6a257ec8ddf5efb3608e77724c16f9a9b936c46b205b0133a3e141b1b84c2f9e8072da66d
SSDEEP 3072:ABN2XdPtLzQWbQ5p8F69mKG5DdWNNO/pOdj0V/E0PVPVGss:oYLMWbNPR+lE/3fG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23220

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesA CreateMutexW GetLastError LoadLibraryW GetCommMask LocalUnlock GetUserDefaultLangID TerminateThread GlobalFlags FileTimeToLocalFileTime GetConsoleAliasesLengthW GetVolumePathNameW InterlockedCompareExchange SetVolumeMountPointA lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA FileTimeToDosDateTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsW VerifyVersionInfoW FindNextFileA GetConsoleAliasW FreeLibraryAndExitThread CreateFileA GetModuleHandleA LoadLibraryA CloseHandle HeapFree MoveFileA DeleteFileA GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

gdi32

GetBrushOrgEx GetCharWidthA

winhttp

WinHttpReadData

msimg32

TransparentBlt

Sharing