file[.]exe | Triage™

General

Target
file.exe
Size 211KB
Sample230102-vhz6wsaa91
SHA256 6084ded8e3883747fc719c4fd37c4e2d07c7c799eab53dd04084f87019eedafe
MD5 58da75d6b1a10f49de6c2388a189424b
SHA1 14869d6713503c1d98b01c28940929b2b7cf23a6
SHA512 f8b8ed68cec7b9dac361a3e73a37493f0874441350fe9d681062f39397470b153aefb30438b2d19aa753953006e4e1c72ab50b43fbfbb00a48422645da28e7d1
SSDEEP 3072:HX58V1gpPLsYbdDl5N3X+W9u3K6Y2gbOKMxqbL9CaGeJfdo9wOK9ZhC4ySP:39PLldD1QPxeJ4aGeBdo9wT1C4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 211KB

file.exe

IMPHASH 3f93d4b66fe1e5d50a0e9327e285a2a8
SHA256 6084ded8e3883747fc719c4fd37c4e2d07c7c799eab53dd04084f87019eedafe
MD5 58da75d6b1a10f49de6c2388a189424b
SHA1 14869d6713503c1d98b01c28940929b2b7cf23a6
SHA512 f8b8ed68cec7b9dac361a3e73a37493f0874441350fe9d681062f39397470b153aefb30438b2d19aa753953006e4e1c72ab50b43fbfbb00a48422645da28e7d1
SSDEEP 3072:HX58V1gpPLsYbdDl5N3X+W9u3K6Y2gbOKMxqbL9CaGeJfdo9wOK9ZhC4ySP:39PLldD1QPxeJ4aGeBdo9wT1C4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24215

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetModuleHandleA CreateDirectoryExW ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc ExitThread GetCurrentProcess RtlCaptureContext InterlockedCompareExchange GetFileTime lstrcatA GetBinaryTypeA SearchPathW AddConsoleAliasW SetProcessPriorityBoost EndUpdateResourceA FindNextFileA FindFirstVolumeA LocalShrink GlobalFlags _llseek UpdateResourceA CreateActCtxW CopyFileW FindFirstFileW FreeEnvironmentStringsW SetErrorMode InterlockedIncrement MoveFileWithProgressA GetTickCount SetLastError GetPrivateProfileStructA VerifyVersionInfoW LoadLibraryA GetLastError HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

gdi32

SetBrushOrgEx

Sharing