file[.]exe | Triage™

General

Target
file.exe
Size 199KB
Sample230126-sdwa2aea98
SHA256 7cb736abdc30a33fe7387988e57d04fd117b985d5f3cb76fa4ee8b8a0a559b9b
MD5 917fe7b784f863195d6f98c41825e3e0
SHA1 73afad5f89cb6a41b423410b3ca7c6562f821ebb
SHA512 c0cd19f49f488f5ffcfcecceee34ff69a7d197637a4d9c618b82d4e333ac7d321ca5b3b3df4513b5c18ffbe130b428e42d35a0406bcd4b43e1fc3dabde20e75c
SSDEEP 3072:uBN2mdZcLMdjUz/LvQs54LdoSowMB+9X43GBfTrgb:CWLMFUjQXdwz+JeKT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 199KB

file.exe

IMPHASH 0cf7da7ba6041e7b7038cd2e90d72093
SHA256 7cb736abdc30a33fe7387988e57d04fd117b985d5f3cb76fa4ee8b8a0a559b9b
MD5 917fe7b784f863195d6f98c41825e3e0
SHA1 73afad5f89cb6a41b423410b3ca7c6562f821ebb
SHA512 c0cd19f49f488f5ffcfcecceee34ff69a7d197637a4d9c618b82d4e333ac7d321ca5b3b3df4513b5c18ffbe130b428e42d35a0406bcd4b43e1fc3dabde20e75c
SSDEEP 3072:uBN2mdZcLMdjUz/LvQs54LdoSowMB+9X43GBfTrgb:CWLMFUjQXdwz+JeKT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23510

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateFileA FileTimeToLocalFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathW GetCurrentDirectoryA WaitForDebugEvent LCMapStringW GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathW ExpandEnvironmentStringsW FindResourceA GetLastError LoadLibraryW GetCommMask LocalReAlloc GetComputerNameExW GetConsoleAliasW TerminateThread GlobalFlags GetConsoleAliasesLengthA DeleteVolumeMountPointA GetVolumePathNameW SetVolumeMountPointA lstrcmpA DeleteTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoW FindNextFileA GetConsoleAliasA SetLastError FreeLibraryAndExitThread CloseHandle MoveFileA GetStartupInfoW GetModuleHandleA EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar HeapAlloc VirtualAlloc HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize DeleteFileA

user32

GetMessageTime

msimg32

TransparentBlt

Sharing