file[.]exe | Triage™

General

Target
file.exe
Size 169KB
Sample230130-tp8aeacf8s
SHA256 acc529e3265aa792796c0425ef493355e31435ae141b8dc13b3a912e83eef57d
MD5 8f5623f90fb89c825bc733533546a79f
SHA1 d862e513342f52050f84f4aae02c4fc6546164a0
SHA512 1c4bbb3ff09ed1aaa47c97e2d2797c8652a0ba204d107b22588636f807e49aaf8515a06e7c75024509ff9b500a107872378ef3007ac001edad7ea0f1ac3fb0ee
SSDEEP 3072:DLNJHLSir5E5MG8X/amLBzzJ6ZGFDBOTj1JFqKJXQ9:zLS+5vFfLHol9JEr9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 169KB

file.exe

IMPHASH 2e8b3dc3bab93b5d4f978cd02983172a
SHA256 acc529e3265aa792796c0425ef493355e31435ae141b8dc13b3a912e83eef57d
MD5 8f5623f90fb89c825bc733533546a79f
SHA1 d862e513342f52050f84f4aae02c4fc6546164a0
SHA512 1c4bbb3ff09ed1aaa47c97e2d2797c8652a0ba204d107b22588636f807e49aaf8515a06e7c75024509ff9b500a107872378ef3007ac001edad7ea0f1ac3fb0ee
SSDEEP 3072:DLNJHLSir5E5MG8X/amLBzzJ6ZGFDBOTj1JFqKJXQ9:zLS+5vFfLHol9JEr9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15810

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW WaitForDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchangeAdd ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError SetCommMask GlobalReAlloc GetConsoleAliasesA LocalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressA AddRefActCtx FoldStringW WritePrivateProfileStringW GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructW InterlockedCompareExchange EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibraryAndExitThread TerminateThread LoadLibraryA SetStdHandle SetFilePointer HeapAlloc HeapFree DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

advapi32

SetThreadToken

msimg32

TransparentBlt

Sharing