file[.]exe | Triage™

General

Target
file.exe
Size 202KB
Sample230127-awrrfshd2x
SHA256 ece5c1360ca1b679e992c9a9a0ef93235d4bcb613ae9e08458ddbd972d7087ac
MD5 54f15722e6a9c4901d48374526492f07
SHA1 daa0033c9ea89bc2979e71ba4afd58269fd814c1
SHA512 1ba5c40c3a0686bce1749a0daf6751180e59510db6d76676f1681e347a63288ef04723720658aec5932a984cebb399ad0b159628a442ff68f9ec2b8cf52f46f0
SSDEEP 3072:IRBN3K7OUMub2CLogMZcm5rSjUHCoejfv+Zjz7XhpT4C+3K2nripDQCL+H:eZCLogMZcASAHlej2z7X52nri8H
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 202KB

file.exe

IMPHASH 794b6772ded6d4a32519508671d87a71
SHA256 ece5c1360ca1b679e992c9a9a0ef93235d4bcb613ae9e08458ddbd972d7087ac
MD5 54f15722e6a9c4901d48374526492f07
SHA1 daa0033c9ea89bc2979e71ba4afd58269fd814c1
SHA512 1ba5c40c3a0686bce1749a0daf6751180e59510db6d76676f1681e347a63288ef04723720658aec5932a984cebb399ad0b159628a442ff68f9ec2b8cf52f46f0
SSDEEP 3072:IRBN3K7OUMub2CLogMZcm5rSjUHCoejfv+Zjz7XhpT4C+3K2nripDQCL+H:eZCLogMZcASAHlej2z7X52nri8H
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23705

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathA GetCurrentDirectoryA WaitForDebugEvent LCMapStringW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError LoadLibraryW GetCommMask LocalReAlloc GetComputerNameExW TerminateThread LocalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointA lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoW FindNextFileA SetLastError GetConsoleAliasA FreeLibraryAndExitThread CloseHandle HeapAlloc DeleteFileA GetStartupInfoW GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW RaiseException HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

msimg32

TransparentBlt

Sharing