file[.]exe | Triage™

General

Target
file.exe
Size 176KB
Sample230124-t9darsec6s
SHA256 8074c401c9bc7db08aa5f953b505723802e5a366f3404bc6d45d30982f0078b7
MD5 5935d7820107ed02a9cd238eedf92aed
SHA1 9f11af45487531d474ef93bb0e11f9da8153e2ca
SHA512 8be5ea555a342371ae8e03b237a144a51a596d83ab7c78b8de72794933c7a527c38c4e4979f1e93cacea18e01be85c5e9c6baf304d6f9da4496ded353f02d099
SSDEEP 3072:oBN2tiYyvvL9VNpz5yEZvAx1pDFXUz2J4RlxMY9U9YgDWD:QfLTNpH9Mjhs2JdZKm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 176KB

file.exe

IMPHASH c714bcf78eb81138b685e33decc27dc8
SHA256 8074c401c9bc7db08aa5f953b505723802e5a366f3404bc6d45d30982f0078b7
MD5 5935d7820107ed02a9cd238eedf92aed
SHA1 9f11af45487531d474ef93bb0e11f9da8153e2ca
SHA512 8be5ea555a342371ae8e03b237a144a51a596d83ab7c78b8de72794933c7a527c38c4e4979f1e93cacea18e01be85c5e9c6baf304d6f9da4496ded353f02d099
SSDEEP 3072:oBN2tiYyvvL9VNpz5yEZvAx1pDFXUz2J4RlxMY9U9YgDWD:QfLTNpH9Mjhs2JdZKm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23204

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesA CreateMutexW GetLastError LoadLibraryW GetCommMask LocalUnlock GetUserDefaultLangID TerminateThread GlobalFlags FileTimeToLocalFileTime GetConsoleAliasesLengthW GetVolumePathNameW InterlockedCompareExchange SetVolumeMountPointA lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA FileTimeToDosDateTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsW VerifyVersionInfoW FindNextFileA GetConsoleAliasW FreeLibraryAndExitThread CreateFileA GetModuleHandleA LoadLibraryA CloseHandle HeapFree MoveFileA DeleteFileA GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

gdi32

GetBrushOrgEx GetCharWidthA

winhttp

WinHttpReadData

msimg32

TransparentBlt

Sharing