file[.]exe | Triage™

General

Target
file.exe
Size 363KB
Sample230102-wlwhjsfa77
SHA256 90154f37365e1c21d009f12bc9221aa6b4c9eeef95fc09369402d00bd2ba611e
MD5 a535c05d961afb5694bf25564c5d7eed
SHA1 80f882374f479d632bdd767ffa92b30fe3c5517b
SHA512 12aca7e10678879a229c3c0161f465bec2a567642ad8fdf56a1f9b9454e57d008376b4dcbaf55a5f741b1cd92d1e78bd1d4bbbbc501d729626a10979f4dfa010
SSDEEP 6144:EojLjvMakw+7qFBzzV1TWWfywLtRR/7fFbPvNV:Eoj3vMa22jzVRWW6wP9f5l
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 363KB

file.exe

IMPHASH 3f93d4b66fe1e5d50a0e9327e285a2a8
SHA256 90154f37365e1c21d009f12bc9221aa6b4c9eeef95fc09369402d00bd2ba611e
MD5 a535c05d961afb5694bf25564c5d7eed
SHA1 80f882374f479d632bdd767ffa92b30fe3c5517b
SHA512 12aca7e10678879a229c3c0161f465bec2a567642ad8fdf56a1f9b9454e57d008376b4dcbaf55a5f741b1cd92d1e78bd1d4bbbbc501d729626a10979f4dfa010
SSDEEP 6144:EojLjvMakw+7qFBzzV1TWWfywLtRR/7fFbPvNV:Eoj3vMa22jzVRWW6wP9f5l
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24215

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetModuleHandleA CreateDirectoryExW ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc ExitThread GetCurrentProcess RtlCaptureContext InterlockedCompareExchange GetFileTime lstrcatA GetBinaryTypeA SearchPathW AddConsoleAliasW SetProcessPriorityBoost EndUpdateResourceA FindNextFileA FindFirstVolumeA LocalShrink GlobalFlags _llseek UpdateResourceA CreateActCtxW CopyFileW FindFirstFileW FreeEnvironmentStringsW SetErrorMode InterlockedIncrement MoveFileWithProgressA GetTickCount SetLastError GetPrivateProfileStructA VerifyVersionInfoW LoadLibraryA GetLastError HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

gdi32

SetBrushOrgEx

Sharing