file[.]exe | Triage™

General

Target
file.exe
Size 333KB
Sample230202-e5dcmsgh2y
SHA256 7f492c0fe8db77c703e29f0899f3ce33fd052e195a137aede9ac9fe364b1b579
MD5 3d0d8ff2c300f8c7dca0274246e9fd09
SHA1 ddb7219c531daf51377b77bb26d269838e50a2c7
SHA512 297e34465da47cd81fee70d56bdc82a90af6b9929678c0ce735c0b508bbe5490ff789d0587c37360584a12902beaec2a1e0034526cc52f4af9c28c9ce12dc06b
SSDEEP 3072:kl97UHycOk3bwLliWK15tfgxqhde/IIzpLZDtfsF4M704fINCTTdFXdazaAJFa:kl7AcLliXV6qiweXEFO4gNy2JF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 333KB

file.exe

IMPHASH fe0b55a75647240d63e8d2d6140a4c09
SHA256 7f492c0fe8db77c703e29f0899f3ce33fd052e195a137aede9ac9fe364b1b579
MD5 3d0d8ff2c300f8c7dca0274246e9fd09
SHA1 ddb7219c531daf51377b77bb26d269838e50a2c7
SHA512 297e34465da47cd81fee70d56bdc82a90af6b9929678c0ce735c0b508bbe5490ff789d0587c37360584a12902beaec2a1e0034526cc52f4af9c28c9ce12dc06b
SSDEEP 3072:kl97UHycOk3bwLliWK15tfgxqhde/IIzpLZDtfsF4M704fINCTTdFXdazaAJFa:kl7AcLliXV6qiweXEFO4gNy2JF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30431

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesW ReadFile AddAtomA CreateFileW FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW LocalSize GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchangeAdd ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA ExpandEnvironmentStringsW FindResourceW FormatMessageA GetModuleHandleA EndUpdateResourceA GetLastError SetCommMask GlobalReAlloc GetConsoleAliasA TerminateThread LocalFlags GetConsoleAliasesLengthW GetVolumePathNameA SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleWindowInfo CopyFileA DosDateTimeToFileTime GetSystemWindowsDirectoryA EnumResourceLanguagesW LoadModule GetOverlappedResult QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW FoldStringA WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject GetLongPathNameW EnumDateFormatsW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoA FindNextFileW GetConsoleAliasW SetLastError FreeLibrary CreateFileA SetStdHandle TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer

user32

GetMessageTime

msimg32

AlphaBlend

Sharing