file[.]exe | Triage™

General

Target
file.exe
Size 169KB
Sample230130-we54eabd63
SHA256 57c57303ab13a2a061006556dc2903e53af6eb3fca8a94b8b6561227ac615e41
MD5 96ababd57b3c510332d71e5110ef73f0
SHA1 20d8c69961a64f2090e9201c3f92a409757c54ca
SHA512 ad58b74b3b8921efc4cc11ead0726aadc4a9cbb7554464ec7075a549d654258441847e3f02fea0aaeefcee67a8792f67d6917b8e3eaaac6f1d203bf633363d64
SSDEEP 3072:ERXaHLogUE85Az6XjMPHPtR+IR+xvXU25nzO9s0gk:fLnUE1uTMPHmIRabU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 169KB

file.exe

IMPHASH f8fcc5813e8e6da25a98928cf56e1d96
SHA256 57c57303ab13a2a061006556dc2903e53af6eb3fca8a94b8b6561227ac615e41
MD5 96ababd57b3c510332d71e5110ef73f0
SHA1 20d8c69961a64f2090e9201c3f92a409757c54ca
SHA512 ad58b74b3b8921efc4cc11ead0726aadc4a9cbb7554464ec7075a549d654258441847e3f02fea0aaeefcee67a8792f67d6917b8e3eaaac6f1d203bf633363d64
SSDEEP 3072:ERXaHLogUE85Az6XjMPHPtR+IR+xvXU25nzO9s0gk:fLnUE1uTMPHmIRabU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15714

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW ContinueDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchangeAdd ReadConsoleOutputCharacterA CreateMutexW GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError SetCommMask GlobalReAlloc GetConsoleAliasesA LocalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressA AddRefActCtx FoldStringW WritePrivateProfileStringA GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructA InterlockedCompareExchange EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibraryAndExitThread TerminateThread LoadLibraryA SetStdHandle SetFilePointer HeapAlloc HeapFree DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

advapi32

SetThreadToken

msimg32

TransparentBlt

Sharing