file[.]exe | Triage™

General

Target
file.exe
Size 186KB
Sample230130-l58bcaaa26
SHA256 778e211b5939adccf0fa0d63bed5ee5eebe0da5c454196218dc86920ebb1bef6
MD5 6d2611225fa58396a4119ef3a046a291
SHA1 944e5ff724f41d0d21529f2c6381dbf5c220e6f9
SHA512 e97aba7b91fb39863bb9ff5d64514875820b076d0613152528a2597c6437b9e9cea741f8a03e1d301759e3a8e25f28e6c19a8928f8340a64eb972b045d72fa21
SSDEEP 3072:AKa6ENXLCliYdg5dzOO4dNtunH1hyVYqF:iNXLnYdxtpunHTkY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 186KB

file.exe

IMPHASH 0d2fad19421d9851d32308ed71cb13d1
SHA256 778e211b5939adccf0fa0d63bed5ee5eebe0da5c454196218dc86920ebb1bef6
MD5 6d2611225fa58396a4119ef3a046a291
SHA1 944e5ff724f41d0d21529f2c6381dbf5c220e6f9
SHA512 e97aba7b91fb39863bb9ff5d64514875820b076d0613152528a2597c6437b9e9cea741f8a03e1d301759e3a8e25f28e6c19a8928f8340a64eb972b045d72fa21
SSDEEP 3072:AKa6ENXLCliYdg5dzOO4dNtunH1hyVYqF:iNXLnYdxtpunHTkY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17145

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathA GetCurrentDirectoryA WaitForDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError GetCommMask GlobalReAlloc GetComputerNameExW GetConsoleAliasesA LocalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressA AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasA SetLastError FreeLibraryAndExitThread TerminateThread LoadLibraryA CloseHandle HeapAlloc DeleteFileA GetStartupInfoW GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

advapi32

SetThreadToken

msimg32

TransparentBlt

Sharing