file[.]exe | Triage™

General

Target
file.exe
Size 211KB
Sample230102-v3p7esfa32
SHA256 90188daa3aa2eab9f309dd2edb5bb30bea5ca9a9f69e642cbdb9401494c900b3
MD5 2362a2280f393737d0d30f5dd9813d37
SHA1 45fbba5af31f44d86b97f8f528b5a2516d9d1b54
SHA512 7ff954b35dc8ba5d29994e8ae50621667dce0439b993e56662cd5dfc9dfc9b57d2296ac0e0633e08e2cbad7017dcbf1d8cb8f120d0a3c54182a76b370d297c58
SSDEEP 3072:QXcRf2veLu1GBp5uK8A7LOacmcnZeOrk/JX94/lXONZh5Xf4dRSP:EzeLfBC2LOxmcnn8JXoOl5P4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 211KB

file.exe

IMPHASH 3f93d4b66fe1e5d50a0e9327e285a2a8
SHA256 90188daa3aa2eab9f309dd2edb5bb30bea5ca9a9f69e642cbdb9401494c900b3
MD5 2362a2280f393737d0d30f5dd9813d37
SHA1 45fbba5af31f44d86b97f8f528b5a2516d9d1b54
SHA512 7ff954b35dc8ba5d29994e8ae50621667dce0439b993e56662cd5dfc9dfc9b57d2296ac0e0633e08e2cbad7017dcbf1d8cb8f120d0a3c54182a76b370d297c58
SSDEEP 3072:QXcRf2veLu1GBp5uK8A7LOacmcnZeOrk/JX94/lXONZh5Xf4dRSP:EzeLfBC2LOxmcnn8JXoOl5P4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24215

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetModuleHandleA CreateDirectoryExW ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc ExitThread GetCurrentProcess RtlCaptureContext InterlockedCompareExchange GetFileTime lstrcatA GetBinaryTypeA SearchPathW AddConsoleAliasW SetProcessPriorityBoost EndUpdateResourceA FindNextFileA FindFirstVolumeA LocalShrink GlobalFlags _llseek UpdateResourceA CreateActCtxW CopyFileW FindFirstFileW FreeEnvironmentStringsW SetErrorMode InterlockedIncrement MoveFileWithProgressA GetTickCount SetLastError GetPrivateProfileStructA VerifyVersionInfoW LoadLibraryA GetLastError HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

gdi32

SetBrushOrgEx

Sharing