file[.]exe | Triage™

General

Target
file.exe
Size 226KB
Sample230201-wjky2ach8x
SHA256 591f15ddc3382fae068f91ee3f1c05f3de36f4b149e32b0160ffa8fa4cc84ac9
MD5 bc5e88671bc71a11534fdfe38cca5d47
SHA1 c6e9123b5904ee5f2e2d8e926048f371afb4b14d
SHA512 e3ecff74a6d03fd18962b5682d9266172617c824e4a6cf36a6916d065cd0186e69908fa592be2c7820c4c308c031476fdac5fecf1ffc192e7466e88c00a0b7ff
SSDEEP 3072:ojAL691LLHFLvcGWfo5M024zC10ok034CwxIA34syukbWbtBaugwd1:oj1XlLvcG2j024DoPRAIc5VkbWpBanc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 226KB

file.exe

IMPHASH a89584e4d2db1e57afffb93455aeedd3
SHA256 591f15ddc3382fae068f91ee3f1c05f3de36f4b149e32b0160ffa8fa4cc84ac9
MD5 bc5e88671bc71a11534fdfe38cca5d47
SHA1 c6e9123b5904ee5f2e2d8e926048f371afb4b14d
SHA512 e3ecff74a6d03fd18962b5682d9266172617c824e4a6cf36a6916d065cd0186e69908fa592be2c7820c4c308c031476fdac5fecf1ffc192e7466e88c00a0b7ff
SSDEEP 3072:ojAL691LLHFLvcGWfo5M024zC10ok034CwxIA34syukbWbtBaugwd1:oj1XlLvcG2j024DoPRAIc5VkbWpBanc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30303

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesW ReadFile AddAtomA CreateFileW SystemTimeToFileTime FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA LocalSize GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchangeAdd ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleW SearchPathA ExpandEnvironmentStringsW FindResourceW FormatMessageA GetModuleHandleA EndUpdateResourceA GetLastError SetCommMask GlobalReAlloc TerminateThread LocalFlags GetConsoleAliasesLengthW GetVolumePathNameA SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleTextAttribute CopyFileA DosDateTimeToFileTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringA WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject GetLongPathNameW EnumDateFormatsW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibrary CreateFileA SetStdHandle TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer

user32

GetMessageTime

msimg32

AlphaBlend

Sharing