file[.]exe | Triage™

General

Target
file.exe
Size 275KB
Sample230130-219llsdb57
SHA256 855072cc0c7d0a8130320db7da5331da4eab4e4c7cefc3bf07ff46da3deb927b
MD5 e741a873b551987235f5e30b8cc5d1dc
SHA1 794c5a11403ec79f0c5dec9429800ef483558680
SHA512 de5c50655dccccca96ead820c1798e8df79683db5207cf8775821a66ed380f3b21da6acc300de39cbab046c7e4e5fa280b96e90b31bb5cc1e44f78e93321a23a
SSDEEP 3072:xj2W4bLfQq3653Oe6BvjHkdbV/mjNw8l5Ni4M+fb8ZST0MSFn+YqwP3DHd5RZR2:0L4q3QfK7HkFVyh7ao8c2FnnnR5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 275KB

file.exe

IMPHASH 896474f3f7eca6a7e942425562e55d89
SHA256 855072cc0c7d0a8130320db7da5331da4eab4e4c7cefc3bf07ff46da3deb927b
MD5 e741a873b551987235f5e30b8cc5d1dc
SHA1 794c5a11403ec79f0c5dec9429800ef483558680
SHA512 de5c50655dccccca96ead820c1798e8df79683db5207cf8775821a66ed380f3b21da6acc300de39cbab046c7e4e5fa280b96e90b31bb5cc1e44f78e93321a23a
SSDEEP 3072:xj2W4bLfQq3653Oe6BvjHkdbV/mjNw8l5Ni4M+fb8ZST0MSFn+YqwP3DHd5RZR2:0L4q3QfK7HkFVyh7ao8c2FnnnR5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15714

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW ContinueDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchangeAdd ReadConsoleOutputCharacterA CreateMutexW GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError SetCommMask GlobalReAlloc GetConsoleAliasesA LocalFlags GetConsoleAliasesLengthA GetVolumePathNameA SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressA AddRefActCtx FoldStringW WritePrivateProfileStringA GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructA InterlockedCompareExchange EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibraryAndExitThread TerminateThread LoadLibraryA SetStdHandle SetFilePointer HeapAlloc HeapFree DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

advapi32

SetThreadToken

msimg32

AlphaBlend

Sharing