file[.]exe | Triage™

General

Target
file.exe
Size 210KB
Sample230102-sjfgrsef88
SHA256 011cbeac7f97ca796ba1de8b89a91556089b9a0f4e6f3adeb0b66b6b8cfa3d75
MD5 07eadf81343c035a4ab9232805f7860e
SHA1 47b4fce11694d8c68d95d412a996d47e28f4303c
SHA512 0011eb2e3be123cdc81f24e833f0112d5ca65d59e2e228fcf2e8198b953f0004f9c8badc0601d1bcee366dc3f3fe632b0a3f08e185d4cc0a0ee7e44e68f8cc1e
SSDEEP 3072:H3XMuWb7MLsx09Raw5cLdS7foyci6Am2IdIknCSDW6:HyQLVAXLI7ARy2CS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 210KB

file.exe

IMPHASH 44e2cf537ef064c2de9a4b8099505d12
SHA256 011cbeac7f97ca796ba1de8b89a91556089b9a0f4e6f3adeb0b66b6b8cfa3d75
MD5 07eadf81343c035a4ab9232805f7860e
SHA1 47b4fce11694d8c68d95d412a996d47e28f4303c
SHA512 0011eb2e3be123cdc81f24e833f0112d5ca65d59e2e228fcf2e8198b953f0004f9c8badc0601d1bcee366dc3f3fe632b0a3f08e185d4cc0a0ee7e44e68f8cc1e
SSDEEP 3072:H3XMuWb7MLsx09Raw5cLdS7foyci6Am2IdIknCSDW6:HyQLVAXLI7ARy2CS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24026

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetModuleHandleA CreateDirectoryExW ReadConsoleInputA GetTempPathA GetSystemDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc ExitThread GetCurrentProcess RtlCaptureContext InterlockedDecrement GetFileTime lstrcatA GetBinaryTypeA SearchPathW AddConsoleAliasW SetProcessPriorityBoost EndUpdateResourceA FindNextFileA FindFirstVolumeA LocalShrink GlobalFlags _llseek UpdateResourceW CreateActCtxW CopyFileW FindFirstFileW FreeEnvironmentStringsW SetErrorMode InterlockedIncrement MoveFileWithProgressW GetTickCount SetLastError GetPrivateProfileStructA VerifyVersionInfoA LoadLibraryA GetLastError HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle FlushFileBuffers

gdi32

SetBrushOrgEx

Sharing