file[.]exe | Triage™

General

Target
file.exe
Size 332KB
Sample230202-ab1tmafd7t
SHA256 27a1982fdaa71485013995aeec19307ed6ff482ab89d901e2d27e46b070b5fe7
MD5 d5576d24ee8784eaf9219011e566882c
SHA1 87a702eb6ada80642d69724dd469d28e8c86a6b5
SHA512 4f9284dc144703b3cfd27e3dfbe1f1d8a3d2a78331b1326f87ff2c0f57819eaf5827ce0b615bdc1e5c358baff175661e73d9748436dc95e53495473a7dbf8999
SSDEEP 6144:e3YjeUL7q8L9PIcDxY7cMgF1tXHYrVUSw5JUld3Gmjpo7MO:e347Xq8L6IKcMg5XHg2SV/2y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 332KB

file.exe

IMPHASH 5b3e1365fd24e4232cba105b88665e84
SHA256 27a1982fdaa71485013995aeec19307ed6ff482ab89d901e2d27e46b070b5fe7
MD5 d5576d24ee8784eaf9219011e566882c
SHA1 87a702eb6ada80642d69724dd469d28e8c86a6b5
SHA512 4f9284dc144703b3cfd27e3dfbe1f1d8a3d2a78331b1326f87ff2c0f57819eaf5827ce0b615bdc1e5c358baff175661e73d9748436dc95e53495473a7dbf8999
SSDEEP 6144:e3YjeUL7q8L9PIcDxY7cMgF1tXHYrVUSw5JUld3Gmjpo7MO:e347Xq8L6IKcMg5XHg2SV/2y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30335

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesW ReadFile AddAtomA CreateFileW SystemTimeToFileTime FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA LocalSize GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchangeAdd ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA ExpandEnvironmentStringsW FindResourceW FormatMessageA GetModuleHandleA EndUpdateResourceA GetLastError SetCommMask GlobalReAlloc TerminateThread LocalFlags GetConsoleAliasesLengthW GetVolumePathNameA SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleWindowInfo CopyFileA DosDateTimeToFileTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringA WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject GetLongPathNameW EnumDateFormatsW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibrary CreateFileA SetStdHandle TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer

user32

GetMessageTime

msimg32

AlphaBlend

Sharing