file[.]exe | Triage™

General

Target
file.exe
Size 314KB
Sample221230-e5dneaeh87
SHA256 b32bc129230eef67aeaaf6180cf9bb2d6b243d174455fe119fe1087a9fb0955c
MD5 de4be5fa69af47c8d579e1cc51ecbd24
SHA1 b2658f8d7ef59d49ca2031c451ff20a369cc0dfa
SHA512 7b2b5755104cf58d88993dfd6c31eb2d95a2026ce4b656aa20ecb48b16c62dea9fae9bbc9618fd2b61915070aae74dd7d0320e314941aa40fddf0630b5372ae1
SSDEEP 3072:TflWLe8K5z58rg0ZRGYRVBYUwIJ+yeJ+gxVYRfENrOKbIxe01Cz5Mqdqujodd/JH:TULelwDZRxVBYE6rYDyIxZ1WqqdS49
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 314KB

file.exe

IMPHASH 71a542e5a6441ac64e119a984b666b26
SHA256 b32bc129230eef67aeaaf6180cf9bb2d6b243d174455fe119fe1087a9fb0955c
MD5 de4be5fa69af47c8d579e1cc51ecbd24
SHA1 b2658f8d7ef59d49ca2031c451ff20a369cc0dfa
SHA512 7b2b5755104cf58d88993dfd6c31eb2d95a2026ce4b656aa20ecb48b16c62dea9fae9bbc9618fd2b61915070aae74dd7d0320e314941aa40fddf0630b5372ae1
SSDEEP 3072:TflWLe8K5z58rg0ZRGYRVBYUwIJ+yeJ+gxVYRfENrOKbIxe01Cz5Mqdqujodd/JH:TULelwDZRxVBYE6rYDyIxZ1WqqdS49
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14440

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA EndUpdateResourceW ReadConsoleA GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount TlsSetValue LoadLibraryW GetConsoleAliasW WriteConsoleW MultiByteToWideChar LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA GetProcessWorkingSetSize OpenWaitableTimerW SetConsoleDisplayMode LockResource SetCommMask GetModuleHandleA OpenFileMappingW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree InterlockedIncrement InterlockedDecrement DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW

user32

WindowFromDC

Sharing