file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample230131-bc8fjadf48
SHA256 5aa4304d76ce25d428450ce7232797f89e4fcc1c7d571bef470ad1c485a63a45
MD5 9ad55bf3d993fbeaa8527d8f8cee2e95
SHA1 5f27fd5129b8dfe6852427ce861c4a541ff0a47c
SHA512 ec7c2270407552e5da52f92b04b252429efb08462313ee1f393d7fe620083eb7c4b6ade6509df6abf1f0ca56feb7ec1a0cbc4df948909f052bbde401405295d1
SSDEEP 3072:ej7ZzuNBLOzQ485e4OmKhEJM5Gpw3pQU9VYPXlqpQFmK3faFL8wD77+y1UAnQSdH:+SvL+Q4OEq0GpUQLNqpeXaF5/smaDgd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH a3b69b35f91a02fbe6dc09300555c500
SHA256 5aa4304d76ce25d428450ce7232797f89e4fcc1c7d571bef470ad1c485a63a45
MD5 9ad55bf3d993fbeaa8527d8f8cee2e95
SHA1 5f27fd5129b8dfe6852427ce861c4a541ff0a47c
SHA512 ec7c2270407552e5da52f92b04b252429efb08462313ee1f393d7fe620083eb7c4b6ade6509df6abf1f0ca56feb7ec1a0cbc4df948909f052bbde401405295d1
SSDEEP 3072:ej7ZzuNBLOzQ485e4OmKhEJM5Gpw3pQU9VYPXlqpQFmK3faFL8wD77+y1UAnQSdH:+SvL+Q4OEq0GpUQLNqpeXaF5/smaDgd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15714

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateFileA SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW ContinueDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchangeAdd ReadConsoleOutputCharacterA CreateMutexW GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceA GetLastError SetCommMask GlobalReAlloc GetConsoleAliasesA LocalFlags GetConsoleAliasesLengthA GetVolumePathNameA SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameW lstrcpynW SetConsoleTextAttribute CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressA AddRefActCtx FoldStringW WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject WritePrivateProfileStructA InterlockedCompareExchange EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibraryAndExitThread TerminateThread LoadLibraryA SetStdHandle SetFilePointer HeapAlloc HeapFree DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageTime

advapi32

SetThreadToken

msimg32

AlphaBlend

Sharing