file[.]exe | Triage™

General

Target
file.exe
Size 202KB
Sample230126-1573xaff53
SHA256 38c41d2b20d22a89d341c398a0569353f78fa8d237d2a7550188c63e7205cc8a
MD5 6da348ed5bcf074ccd3d67bb6d5c12bf
SHA1 eb9d60b9b4cbe5ed23640e059c95704de362ae5e
SHA512 b3b3c45220fb31732b081ff0c4373d43e833de0d5554d02d61091ab74fd7da888c8c7ae16f7a6acb15b1950961746f9fb4ed9a5ddbaaaaa20f6bc0636c83268b
SSDEEP 3072:OeBN3bOHUYAiFVLjV6Sed5eEuwtRZSTGSTonpo4zrChpqi15PWQfHHr/:tYFVLjV6SeDue7Rp+hpf5LfHH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 202KB

file.exe

IMPHASH 8112aba4cbddc2cc0c799fee8b497e25
SHA256 38c41d2b20d22a89d341c398a0569353f78fa8d237d2a7550188c63e7205cc8a
MD5 6da348ed5bcf074ccd3d67bb6d5c12bf
SHA1 eb9d60b9b4cbe5ed23640e059c95704de362ae5e
SHA512 b3b3c45220fb31732b081ff0c4373d43e833de0d5554d02d61091ab74fd7da888c8c7ae16f7a6acb15b1950961746f9fb4ed9a5ddbaaaaa20f6bc0636c83268b
SSDEEP 3072:OeBN3bOHUYAiFVLjV6Sed5eEuwtRZSTGSTonpo4zrChpqi15PWQfHHr/:tYFVLjV6SeDue7Rp+hpf5LfHH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23705

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA GlobalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathW GetCurrentDirectoryA WaitForDebugEvent LCMapStringW GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError LoadLibraryW GetCommMask LocalReAlloc GetComputerNameExW TerminateThread GlobalFlags GetConsoleAliasesLengthA DeleteVolumeMountPointA GetVolumePathNameW SetVolumeMountPointA lstrcmpA DeleteTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoW FindNextFileA SetLastError GetConsoleAliasA FreeLibraryAndExitThread CloseHandle HeapAlloc DeleteFileA GetStartupInfoW GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW RaiseException HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

msimg32

TransparentBlt

Sharing