file[.]exe | Triage™

General

Target
file.exe
Size 202KB
Sample230130-gdeshaba31
SHA256 1efda1c49d34fbe3caffefdd20ae22036ecb25d30738e3463df96b1dec4955dc
MD5 2715a4964a506b50cdc0065890a79218
SHA1 f5b8408839aff0b008c053c8abad43caab5cbd12
SHA512 6cd2e0790f47aea248add26f2397f0d4ea960b9128021ebdb78468d71fb535e65d056e51784f2aa2145c3760fc7d484959938cf16e7ddefa18ae28559e2b3b7a
SSDEEP 3072:UBN3VkR0ayELpmUC5DMR1U0sVErfe2w6j4vk4LwkNWH9WAmaxl:s1ELpmUkZVCjwzvk4sD9Rmaj
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 202KB

file.exe

IMPHASH c12d2adb2dbd84013790ab3af15b680d
SHA256 1efda1c49d34fbe3caffefdd20ae22036ecb25d30738e3463df96b1dec4955dc
MD5 2715a4964a506b50cdc0065890a79218
SHA1 f5b8408839aff0b008c053c8abad43caab5cbd12
SHA512 6cd2e0790f47aea248add26f2397f0d4ea960b9128021ebdb78468d71fb535e65d056e51784f2aa2145c3760fc7d484959938cf16e7ddefa18ae28559e2b3b7a
SSDEEP 3072:UBN3VkR0ayELpmUC5DMR1U0sVErfe2w6j4vk4LwkNWH9WAmaxl:s1ELpmUkZVCjwzvk4sD9Rmaj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23465

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathA GetCurrentDirectoryA WaitForDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError GetCommMask GlobalReAlloc GetComputerNameExW GetConsoleAliasesA LocalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressA AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasA SetLastError FreeLibraryAndExitThread TerminateThread LoadLibraryA CloseHandle HeapAlloc DeleteFileA GetStartupInfoW GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW RaiseException HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

advapi32

SetThreadToken

msimg32

TransparentBlt

Sharing