file[.]exe | Triage™

General

Target
file.exe
Size 176KB
Sample230124-tym1tscf38
SHA256 81bc08fabf2c6786e3c0c275e30b09e85d895ffc2ffdcdff7ca1b135b4f22fff
MD5 9ce236fd0aca0ba9164b47b0aa057b6e
SHA1 2f4b6bcc6ba9e95aff47af18b990be3aa436cfa1
SHA512 c8fa9090f338b2c1908e29c4accca958bc32eaca554b027dcdd86713feb3bc0a32205c4009a8e9001f40ee43e9f003554222b5442176023e9ab8fa9a2e903996
SSDEEP 3072:9lBN2HwQY33PLFFM2705ciehB/aFALU2hfgY1xycreBbe5FT8:txPL7H7p/BLNhd8creJe5F
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 176KB

file.exe

IMPHASH c714bcf78eb81138b685e33decc27dc8
SHA256 81bc08fabf2c6786e3c0c275e30b09e85d895ffc2ffdcdff7ca1b135b4f22fff
MD5 9ce236fd0aca0ba9164b47b0aa057b6e
SHA1 2f4b6bcc6ba9e95aff47af18b990be3aa436cfa1
SHA512 c8fa9090f338b2c1908e29c4accca958bc32eaca554b027dcdd86713feb3bc0a32205c4009a8e9001f40ee43e9f003554222b5442176023e9ab8fa9a2e903996
SSDEEP 3072:9lBN2HwQY33PLFFM2705ciehB/aFALU2hfgY1xycreBbe5FT8:txPL7H7p/BLNhd8creJe5F
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23204

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesA CreateMutexW GetLastError LoadLibraryW GetCommMask LocalUnlock GetUserDefaultLangID TerminateThread GlobalFlags FileTimeToLocalFileTime GetConsoleAliasesLengthW GetVolumePathNameW InterlockedCompareExchange SetVolumeMountPointA lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA FileTimeToDosDateTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsW VerifyVersionInfoW FindNextFileA GetConsoleAliasW FreeLibraryAndExitThread CreateFileA GetModuleHandleA LoadLibraryA CloseHandle HeapFree MoveFileA DeleteFileA GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

gdi32

GetBrushOrgEx GetCharWidthA

winhttp

WinHttpReadData

msimg32

TransparentBlt

Sharing