file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample230102-kcemwsdg44
SHA256 61ec14d901f7d00ec0c6ec5e76093a881de5e6ca86a7d4fc0ea26256f5d693f6
MD5 d48e5591b663d4835b45712c8f690391
SHA1 48352b35c43a7b995b300bc0fe3aea206adab262
SHA512 890fb20fce7ad544ad1717cfc16b32c87dd8feaf04cea8b77e99a573bdfd25b9c31401457e7e38a3b2d85e6b548ce62a5e808bccbdd46c1452008500d0649911
SSDEEP 3072:CXMiKlBxL3JDi/Pan5abeErVG5XeuqTnyC8IdenHW6:CGxLQqILrspeuqb0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 4b588383af4c949e6efec69bed4806e0
SHA256 61ec14d901f7d00ec0c6ec5e76093a881de5e6ca86a7d4fc0ea26256f5d693f6
MD5 d48e5591b663d4835b45712c8f690391
SHA1 48352b35c43a7b995b300bc0fe3aea206adab262
SHA512 890fb20fce7ad544ad1717cfc16b32c87dd8feaf04cea8b77e99a573bdfd25b9c31401457e7e38a3b2d85e6b548ce62a5e808bccbdd46c1452008500d0649911
SSDEEP 3072:CXMiKlBxL3JDi/Pan5abeErVG5XeuqTnyC8IdenHW6:CGxLQqILrspeuqb0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24026

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetModuleHandleW CreateDirectoryExW ReadConsoleInputA GetTempPathA GetSystemDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc ExitThread GetCurrentProcess RtlCaptureContext InterlockedDecrement SetFileTime lstrcatA GetBinaryTypeW SearchPathW VerifyVersionInfoW SetProcessPriorityBoost AddConsoleAliasA FindNextFileA FindFirstVolumeA LocalShrink LocalFlags _llseek UpdateResourceW CreateActCtxW CopyFileA FindFirstFileW FreeEnvironmentStringsW SetErrorMode InterlockedIncrement MoveFileWithProgressW GetModuleHandleA GetTickCount SetLastError GetPrivateProfileStructA EndUpdateResourceA LoadLibraryA GetLastError HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffW

gdi32

SetBrushOrgEx

Sharing