file[.]exe | Triage™

General

Target
file.exe
Size 201KB
Sample230127-cracqagb87
SHA256 2f2e1fe9ddf13496478fa00e6dc14561bf28c76a9ab5a007658e8038bb2a31b6
MD5 c97709361260b5eb1758521e659c2906
SHA1 0c6f05d762b421650ff35294c17a8397871e88a2
SHA512 8e48d80aff51592c49b8c94ea0aadb93beb42546390309ef81922d053c5be7b2efe624e4dc52e111139f35c9e2a381786e2f91117298c3f80ed5052bba2fce61
SSDEEP 3072:eKBN3bpOGesgNbHNLew/0o45S8UWmp0lqbT/LS9WL4XFH8:NHgRNLew/0UXWd1WLAH8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 201KB

file.exe

IMPHASH 794b6772ded6d4a32519508671d87a71
SHA256 2f2e1fe9ddf13496478fa00e6dc14561bf28c76a9ab5a007658e8038bb2a31b6
MD5 c97709361260b5eb1758521e659c2906
SHA1 0c6f05d762b421650ff35294c17a8397871e88a2
SHA512 8e48d80aff51592c49b8c94ea0aadb93beb42546390309ef81922d053c5be7b2efe624e4dc52e111139f35c9e2a381786e2f91117298c3f80ed5052bba2fce61
SSDEEP 3072:eKBN3bpOGesgNbHNLew/0o45S8UWmp0lqbT/LS9WL4XFH8:NHgRNLew/0UXWd1WLAH8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23705

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathA GetCurrentDirectoryA WaitForDebugEvent LCMapStringW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError LoadLibraryW GetCommMask LocalReAlloc GetComputerNameExW TerminateThread LocalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointA lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoW FindNextFileA SetLastError GetConsoleAliasA FreeLibraryAndExitThread CloseHandle HeapAlloc DeleteFileA GetStartupInfoW GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW RaiseException HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

msimg32

TransparentBlt

Sharing