file[.]exe | Triage™

General

Target
file.exe
Size 307KB
Sample230130-grflysba5v
SHA256 c8a4efbd13864db442b767bcdb3478702af845f72741a465f37d8d4c4c417fac
MD5 4df5809bad0ddaace9194d3b1190fd30
SHA1 b0c2f5adf0dc8819ff804577547b82b48c9018d4
SHA512 8e195d8de7529ecd1af2729d78292a9ff78989d81deb0191d4e5b7b23a3f62a31159b683ec50e346a411c9c4c8260552d3e0574ada5f0d2adca0a919822373aa
SSDEEP 6144:lleQLfb5ibvVTyxEtMDFnINP0TPAo+VVdFJJHWDdkMV:brb5ibdPykPMYvVspkMV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 307KB

file.exe

IMPHASH c12d2adb2dbd84013790ab3af15b680d
SHA256 c8a4efbd13864db442b767bcdb3478702af845f72741a465f37d8d4c4c417fac
MD5 4df5809bad0ddaace9194d3b1190fd30
SHA1 b0c2f5adf0dc8819ff804577547b82b48c9018d4
SHA512 8e195d8de7529ecd1af2729d78292a9ff78989d81deb0191d4e5b7b23a3f62a31159b683ec50e346a411c9c4c8260552d3e0574ada5f0d2adca0a919822373aa
SSDEEP 6144:lleQLfb5ibvVTyxEtMDFnINP0TPAo+VVdFJJHWDdkMV:brb5ibdPykPMYvVspkMV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23465

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathA GetCurrentDirectoryA WaitForDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError GetCommMask GlobalReAlloc GetComputerNameExW GetConsoleAliasesA LocalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressA AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasA SetLastError FreeLibraryAndExitThread TerminateThread LoadLibraryA CloseHandle HeapAlloc DeleteFileA GetStartupInfoW GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW RaiseException HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

advapi32

SetThreadToken

msimg32

TransparentBlt

Sharing