file[.]exe | Triage™

General

Target
file.exe
Size 331KB
Sample230201-sdwa2aab92
SHA256 6e3ef582ebca27f12ebff54f82e8049baf35d2586ce5b943615474b2bc951137
MD5 ef176de01a21df20fc402095195076e8
SHA1 f129a8138792a2a6d34961fbcd8863496adb1d6e
SHA512 e341411fb22baff5ee62dbd05dfb9031bfc433d30b6de1889b2029fd612fffd892cbd799a4dfff8f98a55f033178d0441dede27eaa204b63d1a0f5e28fcbf0c2
SSDEEP 6144:yqGMf5kLLy1ILlqCuDiV2KdA9MApDZs7oU5tUEGNEPN4:yqTG/y1IwCCgBeSApy7oq6VNE6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 331KB

file.exe

IMPHASH d01c6281454d353a6df0a9c31baea59c
SHA256 6e3ef582ebca27f12ebff54f82e8049baf35d2586ce5b943615474b2bc951137
MD5 ef176de01a21df20fc402095195076e8
SHA1 f129a8138792a2a6d34961fbcd8863496adb1d6e
SHA512 e341411fb22baff5ee62dbd05dfb9031bfc433d30b6de1889b2029fd612fffd892cbd799a4dfff8f98a55f033178d0441dede27eaa204b63d1a0f5e28fcbf0c2
SSDEEP 6144:yqGMf5kLLy1ILlqCuDiV2KdA9MApDZs7oU5tUEGNEPN4:yqTG/y1IwCCgBeSApy7oq6VNE6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30175

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesW ReadFile CreateFileW SystemTimeToFileTime FindActCtxSectionStringA GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA LocalSize GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchangeAdd ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceW FormatMessageA GetModuleHandleA EndUpdateResourceA GetLastError SetCommMask GlobalReAlloc TerminateThread LocalFlags GetConsoleAliasesLengthW GetVolumePathNameA SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleTextAttribute CopyFileA DosDateTimeToFileTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringA WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject GetLongPathNameW EnumDateFormatsW InterlockedCompareExchange EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibrary CreateFileA SetStdHandle TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer

user32

GetMessageTime

msimg32

AlphaBlend

Sharing