file[.]exe | Triage™

General

Target
file.exe
Size 197KB
Sample230126-v39wtsee88
SHA256 3c8bcffa4129325099ce496b056cc58ec103addb8b14d0fbfb6b4445bd59d99e
MD5 3908a5eaa9a469afbd495ffc6b26395b
SHA1 94c2566112f54e9aa2169e9107ccaa116c9e6f3b
SHA512 4adfd8f02f8815332ee3c51e8a59d52e4c900f4c8be0a6bd66aff5a509aff84757141b6a47b9b1ddd605c74ed6665a397d06357db5ba43f7447301e06a6ce144
SSDEEP 3072:dBN2lp5bQ9LR6aLjxyW5IMEhCTC7IC6KHy6ocDDQMJFg:jNLR/jxyRCWE6Cs
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 197KB

file.exe

IMPHASH 3441d27f999e45e989c5f0204be01528
SHA256 3c8bcffa4129325099ce496b056cc58ec103addb8b14d0fbfb6b4445bd59d99e
MD5 3908a5eaa9a469afbd495ffc6b26395b
SHA1 94c2566112f54e9aa2169e9107ccaa116c9e6f3b
SHA512 4adfd8f02f8815332ee3c51e8a59d52e4c900f4c8be0a6bd66aff5a509aff84757141b6a47b9b1ddd605c74ed6665a397d06357db5ba43f7447301e06a6ce144
SSDEEP 3072:dBN2lp5bQ9LR6aLjxyW5IMEhCTC7IC6KHy6ocDDQMJFg:jNLR/jxyRCWE6Cs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22998

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA GlobalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathW GetCurrentDirectoryA WaitForDebugEvent LCMapStringW GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError LoadLibraryW GetCommMask LocalReAlloc GetComputerNameExW GetConsoleAliasW TerminateThread GlobalFlags GetConsoleAliasesLengthA DeleteVolumeMountPointA GetVolumePathNameW SetVolumeMountPointA lstrcmpA DeleteTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoW FindNextFileA GetConsoleAliasA SetLastError FreeLibraryAndExitThread CloseHandle MoveFileA GetStartupInfoW GetModuleHandleA EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar HeapAlloc VirtualAlloc HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize DeleteFileA

user32

GetMessageTime

msimg32

TransparentBlt

Sharing