file[.]exe | Triage™

General

Target
file.exe
Size 200KB
Sample230126-y29ffsfc83
SHA256 0ef7b8cc63d0c37976242e1e0ec9f17e343694e44f3743a2bbedff169669dc44
MD5 2554ddbdd99382c48cf8bfea41b68b50
SHA1 566fb0caaff5c20bddd8d14b79aa61009a9b4b57
SHA512 bcd092325462e932fe792f4ce0b68c883dd73b1d67040565d79d544e1815e6a855b0ae65f3abcd3a917619bdb59ef9d98fc4cef04cdbd63e61dfc5dc45646f7c
SSDEEP 3072:fBN2Khf7bWGGL6YTrvptJw5pAFkhdIH/E8DUvdI2XI+jD4hQuYp:ZzbWnL6wptJ2igdIfE8YvXd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 200KB

file.exe

IMPHASH 4dfa6309511cb75d1093a1ac55cf0bae
SHA256 0ef7b8cc63d0c37976242e1e0ec9f17e343694e44f3743a2bbedff169669dc44
MD5 2554ddbdd99382c48cf8bfea41b68b50
SHA1 566fb0caaff5c20bddd8d14b79aa61009a9b4b57
SHA512 bcd092325462e932fe792f4ce0b68c883dd73b1d67040565d79d544e1815e6a855b0ae65f3abcd3a917619bdb59ef9d98fc4cef04cdbd63e61dfc5dc45646f7c
SSDEEP 3072:fBN2Khf7bWGGL6YTrvptJw5pAFkhdIH/E8DUvdI2XI+jD4hQuYp:ZzbWnL6wptJ2igdIfE8YvXd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23046

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA GlobalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathW GetCurrentDirectoryA WaitForDebugEvent LCMapStringW GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError LoadLibraryW GetCommMask LocalReAlloc GetComputerNameExW GetConsoleAliasW TerminateThread GlobalFlags GetConsoleAliasesLengthA DeleteVolumeMountPointA GetVolumePathNameW SetVolumeMountPointA lstrcmpA DeleteTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoW FindNextFileA GetConsoleAliasA SetLastError FreeLibraryAndExitThread CloseHandle MoveFileA GetStartupInfoW GetModuleHandleA EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar HeapAlloc VirtualAlloc HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize DeleteFileA

user32

GetMessageTime

msimg32

TransparentBlt

Sharing