file[.]exe | Triage™

General

Target
file.exe
Size 225KB
Sample230201-pc6tladb27
SHA256 8d98ff38cd57eca0641f68e8ac710f45330bd623ab684c8ea2b4e23d8975b4b2
MD5 b1685a4ea1f4c0626157053bf23617ac
SHA1 196e39e2adcb098c20db971a858edcd96a8081d7
SHA512 ade64c87fba7c86a3aec55d484921ce53f77e1cb121c8b5b2cfef7e345e2865aac72b400b3220398e8efad99505853962994624450573a2b9071828996bec666
SSDEEP 3072:RW8G5lRMx7Ql8KNL6DWHe5c3L7AoLJlDKQNhlxvpRNDRYicN27GjDGx:RW8jg8gL6Dej77vlDF5pRNKMGjDGx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 225KB

file.exe

IMPHASH 66bfc39816e8f6ee52bb21c72f57e3c6
SHA256 8d98ff38cd57eca0641f68e8ac710f45330bd623ab684c8ea2b4e23d8975b4b2
MD5 b1685a4ea1f4c0626157053bf23617ac
SHA1 196e39e2adcb098c20db971a858edcd96a8081d7
SHA512 ade64c87fba7c86a3aec55d484921ce53f77e1cb121c8b5b2cfef7e345e2865aac72b400b3220398e8efad99505853962994624450573a2b9071828996bec666
SSDEEP 3072:RW8G5lRMx7Ql8KNL6DWHe5c3L7AoLJlDKQNhlxvpRNDRYicN27GjDGx:RW8jg8gL6Dej77vlDF5pRNKMGjDGx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30159

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesW ReadFile CreateFileW SystemTimeToFileTime FindActCtxSectionStringA GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW ContinueDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchangeAdd ReadConsoleOutputCharacterA CreateMutexW GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceW FormatMessageA GetModuleHandleA EndUpdateResourceA GetLastError SetCommMask GlobalReAlloc TerminateThread LocalFlags GetConsoleAliasesLengthW GetVolumePathNameA SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleTextAttribute CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringA WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibrary CreateFileA SetStdHandle TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer

user32

GetMessageTime

msimg32

AlphaBlend

Sharing