file[.]exe | Triage™

General

Target
file.exe
Size 239KB
Sample230101-pp2emseh3w
SHA256 78f8d8b4979be02875664f2a899a92eb49c718fca9b58a1d9416ca1e1ae04da9
MD5 605ffc648bcfbaec7cb1f8f42857aaef
SHA1 3a26733235a73f44d629c9c259a1dc431309d6c9
SHA512 c40f54bafac241add9e5232621bf3eec016d5d0fefff8834962b24c6cb8106fe5774c3776d90085f0444b36533dbfc0aabff315f4f5146e7290944861d3b27fb
SSDEEP 3072:GX5QSpFLJho6bJ0h5fguS3ed2oTdttAOk8XlPQ5DI2R2jalmqn0BjQ27hZY:uF3Lzmry3sNZEOk+lPQK2EjZ80BxZY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 239KB

file.exe

IMPHASH 94db6c87a3c38e8c83b44391baf54d5e
SHA256 78f8d8b4979be02875664f2a899a92eb49c718fca9b58a1d9416ca1e1ae04da9
MD5 605ffc648bcfbaec7cb1f8f42857aaef
SHA1 3a26733235a73f44d629c9c259a1dc431309d6c9
SHA512 c40f54bafac241add9e5232621bf3eec016d5d0fefff8834962b24c6cb8106fe5774c3776d90085f0444b36533dbfc0aabff315f4f5146e7290944861d3b27fb
SSDEEP 3072:GX5QSpFLJho6bJ0h5fguS3ed2oTdttAOk8XlPQ5DI2R2jalmqn0BjQ27hZY:uF3Lzmry3sNZEOk+lPQK2EjZ80BxZY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24266

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryExW ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringW GetProcAddress LocalAlloc ExitThread FindResourceA LoadModule InterlockedDecrement RemoveVectoredExceptionHandler lstrcatA GetBinaryTypeW SearchPathW VerifyVersionInfoW CopyFileExW GetThreadLocale GetModuleHandleW FindFirstVolumeW LocalShrink LocalFlags _llseek UpdateResourceW CreateActCtxW CopyFileA FindFirstFileW FreeEnvironmentStringsW EnumResourceLanguagesA InterlockedIncrement MoveFileWithProgressW GetModuleHandleA GetTickCount SetLastError GetPrivateProfileStructW AddConsoleAliasA GetConsoleAliasW FindNextFileA LoadLibraryA GetLastError HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffW

gdi32

SetBrushOrgEx

advapi32

AccessCheckByType

Sharing