file[.]exe | Triage™

General

Target
file.exe
Size 169KB
Sample230130-yh4e4aea3t
SHA256 f01ff021ad52f49c62e47d3e89bb71b46af8e916b449b2c04d94f4394f4ef22e
MD5 5a0e08279c56666c2d21ea0658a28827
SHA1 12b5c3d49186fbc82c0b414bdfe5cebee100f3b2
SHA512 86982152a98e81b899096d7f4c248179d1bb0daf4dfd394fe8de83d45af88dc0fd6b51dae49603d58cb057ae1e8c3b8ab3646577b791aece94bbc7105137f969
SSDEEP 3072:8pjZh6LTAszX5ocLIJu484M8Ue+qoo5gzse16:Q8L0szT8JVzM8Ue+qo4gzs7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 169KB

file.exe

IMPHASH f8fcc5813e8e6da25a98928cf56e1d96
SHA256 f01ff021ad52f49c62e47d3e89bb71b46af8e916b449b2c04d94f4394f4ef22e
MD5 5a0e08279c56666c2d21ea0658a28827
SHA1 12b5c3d49186fbc82c0b414bdfe5cebee100f3b2
SHA512 86982152a98e81b899096d7f4c248179d1bb0daf4dfd394fe8de83d45af88dc0fd6b51dae49603d58cb057ae1e8c3b8ab3646577b791aece94bbc7105137f969
SSDEEP 3072:8pjZh6LTAszX5ocLIJu484M8Ue+qoo5gzse16:Q8L0szT8JVzM8Ue+qo4gzs7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15714

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW ContinueDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchangeAdd ReadConsoleOutputCharacterA CreateMutexW GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError SetCommMask GlobalReAlloc GetConsoleAliasesA LocalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressA AddRefActCtx FoldStringW WritePrivateProfileStringA GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructA InterlockedCompareExchange EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibraryAndExitThread TerminateThread LoadLibraryA SetStdHandle SetFilePointer HeapAlloc HeapFree DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

advapi32

SetThreadToken

msimg32

TransparentBlt

Sharing