file[.]exe | Triage™

General

Target
file.exe
Size 240KB
Sample230101-llgdhsbd93
SHA256 cf6c4e067867154366a78dac0328907036f4f21f3bfab0d7ce9e8fcbecaa6dc2
MD5 860f74c9d1ed88bf8abdf772434a2060
SHA1 92a7a985dfa47bac4d10dc630ad07760017de009
SHA512 919d3c696a8a9142fe04f9a1179d93c224f411b9adc9e9aa1b17349c2a67589ccd67e2180625c19589720eb19627061de16ef2069509df9a5d1cf8e08b61a4d2
SSDEEP 3072:cX5sUjLm3dVBddOU3g5TCfmhQwHI7U8GtLJaPBkr4+l8lmqeniE27hZY:YpLOdYUoCfmrYYJaPBkr4qzYRZY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 240KB

file.exe

IMPHASH 94db6c87a3c38e8c83b44391baf54d5e
SHA256 cf6c4e067867154366a78dac0328907036f4f21f3bfab0d7ce9e8fcbecaa6dc2
MD5 860f74c9d1ed88bf8abdf772434a2060
SHA1 92a7a985dfa47bac4d10dc630ad07760017de009
SHA512 919d3c696a8a9142fe04f9a1179d93c224f411b9adc9e9aa1b17349c2a67589ccd67e2180625c19589720eb19627061de16ef2069509df9a5d1cf8e08b61a4d2
SSDEEP 3072:cX5sUjLm3dVBddOU3g5TCfmhQwHI7U8GtLJaPBkr4+l8lmqeniE27hZY:YpLOdYUoCfmrYYJaPBkr4qzYRZY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24266

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryExW ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringW GetProcAddress LocalAlloc ExitThread FindResourceA LoadModule InterlockedDecrement RemoveVectoredExceptionHandler lstrcatA GetBinaryTypeW SearchPathW VerifyVersionInfoW CopyFileExW GetThreadLocale GetModuleHandleW FindFirstVolumeW LocalShrink LocalFlags _llseek UpdateResourceW CreateActCtxW CopyFileA FindFirstFileW FreeEnvironmentStringsW EnumResourceLanguagesA InterlockedIncrement MoveFileWithProgressW GetModuleHandleA GetTickCount SetLastError GetPrivateProfileStructW AddConsoleAliasA GetConsoleAliasW FindNextFileA LoadLibraryA GetLastError HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffW

gdi32

SetBrushOrgEx

advapi32

AccessCheckByType

Sharing