file[.]exe | Triage™

General

Target
file.exe
Size 226KB
Sample230201-j4earsec9v
SHA256 70cc532f97f64fdb443d7e5f4b100918ef4701263f35be62d30b7c1fd70ea470
MD5 22795ac80470f6fa863164904880b06a
SHA1 b6319330826a68d2e78663f9922226c2b931c5d0
SHA512 c2c1bfb7feef8652ca7b51c9b742aeea2ae4882e6d073043e9577dabe1923ce2193c873f5ca56fc7d5d2ea92b13c62d8727050325be4ba31509361d66136228d
SSDEEP 3072:QW/Gn10lc7v0G9Lb4WMQ5x7EWA540NDBIKpdGQZEV1UX6b:QW/Dov0gLb4F0EWCZNGK7C0X6b
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 226KB

file.exe

IMPHASH 1bd819fed1b7e1f177cee8ab49452c78
SHA256 70cc532f97f64fdb443d7e5f4b100918ef4701263f35be62d30b7c1fd70ea470
MD5 22795ac80470f6fa863164904880b06a
SHA1 b6319330826a68d2e78663f9922226c2b931c5d0
SHA512 c2c1bfb7feef8652ca7b51c9b742aeea2ae4882e6d073043e9577dabe1923ce2193c873f5ca56fc7d5d2ea92b13c62d8727050325be4ba31509361d66136228d
SSDEEP 3072:QW/Gn10lc7v0G9Lb4WMQ5x7EWA540NDBIKpdGQZEV1UX6b:QW/Dov0gLb4F0EWCZNGK7C0X6b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30159

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesW ReadFile CreateFileW SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW ContinueDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchangeAdd ReadConsoleOutputCharacterA CreateMutexW GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceW FormatMessageA GetModuleHandleA EndUpdateResourceA GetLastError SetCommMask GlobalReAlloc TerminateThread LocalFlags GetConsoleAliasesLengthA GetVolumePathNameA SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleTextAttribute CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringW WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibrary CreateFileA SetStdHandle TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer

user32

GetMessageTime

msimg32

AlphaBlend

Sharing