file[.]exe | Triage™

General

Target
file.exe
Size 292KB
Sample230130-mkdfxabf4x
SHA256 debb0d4b2d4a3ed1f4efbb96b3391f8ea9a94965a3461d03c7806aed66adea7f
MD5 1786fd8bad071b192da95de8847b0e81
SHA1 6827a71ff21cd1cc1775d1736e1e0197b556c22d
SHA512 3ee21a26d67b84017aad2cef5b806575120cc9697ef0edfcdb2e7bc1bcb13e98ba528ae8cda179fc0b712810cde861ab605ee0f895c573f402a1ba3b4580dc7a
SSDEEP 6144:tX0QDL9UtA+ZjGaIlxc2JwbS/0KWKk3smp9vuQas+eIze:tXfutAiSlCOEdBImppuQa/e0e
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 292KB

file.exe

IMPHASH fc4c2bb881c9fd6328b9ffc5b320f498
SHA256 debb0d4b2d4a3ed1f4efbb96b3391f8ea9a94965a3461d03c7806aed66adea7f
MD5 1786fd8bad071b192da95de8847b0e81
SHA1 6827a71ff21cd1cc1775d1736e1e0197b556c22d
SHA512 3ee21a26d67b84017aad2cef5b806575120cc9697ef0edfcdb2e7bc1bcb13e98ba528ae8cda179fc0b712810cde861ab605ee0f895c573f402a1ba3b4580dc7a
SSDEEP 6144:tX0QDL9UtA+ZjGaIlxc2JwbS/0KWKk3smp9vuQas+eIze:tXfutAiSlCOEdBImppuQa/e0e
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17145

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW WaitForDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError SetCommMask GlobalReAlloc GetComputerNameExW GetConsoleAliasesA TerminateThread LocalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressA AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedCompareExchange EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasA SetLastError FreeLibraryAndExitThread GetConsoleAliasW LoadLibraryA CloseHandle HeapAlloc DeleteFileA GetStartupInfoW GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

advapi32

SetThreadToken

msimg32

TransparentBlt

Sharing