file[.]exe | Triage™

General

Target
file.exe
Size 201KB
Sample230127-dvrxlsgc62
SHA256 2a55776e8a0738cd7a124d773e4c12fbddeee12602f161008f1b24d0c9a481d0
MD5 aa1e1bf4e70306b12a24a2f039e5278e
SHA1 995962d91492171afd7605fab6a4ade14bf226bf
SHA512 ae8cfdba8279be8699ef0d71c069530e45039997255ff308b17e84f77c8c1f65823ac9ca195a8f2d013c26cce88260273cf0ec920d05dcd17b91ed08aced95b6
SSDEEP 3072:RmBN3J2OgAEA4xneLSkDj5x/EThmUHdQywjRr2EaOoo9rVbv4Hp:McA+eLSkDPP8QyeMOoo9rOHp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 201KB

file.exe

IMPHASH 794b6772ded6d4a32519508671d87a71
SHA256 2a55776e8a0738cd7a124d773e4c12fbddeee12602f161008f1b24d0c9a481d0
MD5 aa1e1bf4e70306b12a24a2f039e5278e
SHA1 995962d91492171afd7605fab6a4ade14bf226bf
SHA512 ae8cfdba8279be8699ef0d71c069530e45039997255ff308b17e84f77c8c1f65823ac9ca195a8f2d013c26cce88260273cf0ec920d05dcd17b91ed08aced95b6
SSDEEP 3072:RmBN3J2OgAEA4xneLSkDj5x/EThmUHdQywjRr2EaOoo9rVbv4Hp:McA+eLSkDPP8QyeMOoo9rOHp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23705

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathA GetCurrentDirectoryA WaitForDebugEvent LCMapStringW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError LoadLibraryW GetCommMask LocalReAlloc GetComputerNameExW TerminateThread LocalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointA lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoW FindNextFileA SetLastError GetConsoleAliasA FreeLibraryAndExitThread CloseHandle HeapAlloc DeleteFileA GetStartupInfoW GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW RaiseException HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

msimg32

TransparentBlt

Sharing