file[.]exe | Triage™

General

Target
file.exe
Size 187KB
Sample230130-lnrx2abe5x
SHA256 ea7e2b71689f54e114cc8d710a2e84c1289a89dd54dc8c3335e2e8581c17b7ae
MD5 e415f42f7455fe54260ac9b71c4872db
SHA1 22f3686c49405a3dea3da9c29e1eba8df92adaff
SHA512 e891f9260f2845f9138a1df3482d36970c86ec61b43cd14f203a9969f1f26eb08f04888f357148910a162a11c97c211f6938fae61de3bb4007a91886114c7c30
SSDEEP 3072:JGIVHuiCLou2QCEz59posiAUYTVbAhv8RBXxcbpqF:zuiCLSQCgTAJ8PI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 187KB

file.exe

IMPHASH 0d2fad19421d9851d32308ed71cb13d1
SHA256 ea7e2b71689f54e114cc8d710a2e84c1289a89dd54dc8c3335e2e8581c17b7ae
MD5 e415f42f7455fe54260ac9b71c4872db
SHA1 22f3686c49405a3dea3da9c29e1eba8df92adaff
SHA512 e891f9260f2845f9138a1df3482d36970c86ec61b43cd14f203a9969f1f26eb08f04888f357148910a162a11c97c211f6938fae61de3bb4007a91886114c7c30
SSDEEP 3072:JGIVHuiCLou2QCEz59posiAUYTVbAhv8RBXxcbpqF:zuiCLSQCgTAJ8PI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17145

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathA GetCurrentDirectoryA WaitForDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError GetCommMask GlobalReAlloc GetComputerNameExW GetConsoleAliasesA LocalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressA AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasA SetLastError FreeLibraryAndExitThread TerminateThread LoadLibraryA CloseHandle HeapAlloc DeleteFileA GetStartupInfoW GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

advapi32

SetThreadToken

msimg32

TransparentBlt

Sharing