file[.]exe | Triage™

General

Target
file.exe
Size 212KB
Sample230102-yfswksbb8v
SHA256 796ab184912db42dce497c51a1e0721345aab0766f7b25d97ccc10cdb7dea521
MD5 6b91754dc91d468dd06b4dae6ed8eef4
SHA1 27bd5391dd9d4c117254c51ecc8de5e4fe02350f
SHA512 e8b3da0a6b10d135101f2a0ba3ddda9224a6869d9e5036d5581fbfca561f48475c76f690d51aa7946467ad82e658403d70aed536f430222d86497e55c9e0f4dd
SSDEEP 3072:lXprnqHHTLF+k+SHLF5VHDaa+SVoIjbQalIjyhZhVhSP:hsTLoWHLBDP+SVoqQaCOxV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 212KB

file.exe

IMPHASH 3f93d4b66fe1e5d50a0e9327e285a2a8
SHA256 796ab184912db42dce497c51a1e0721345aab0766f7b25d97ccc10cdb7dea521
MD5 6b91754dc91d468dd06b4dae6ed8eef4
SHA1 27bd5391dd9d4c117254c51ecc8de5e4fe02350f
SHA512 e8b3da0a6b10d135101f2a0ba3ddda9224a6869d9e5036d5581fbfca561f48475c76f690d51aa7946467ad82e658403d70aed536f430222d86497e55c9e0f4dd
SSDEEP 3072:lXprnqHHTLF+k+SHLF5VHDaa+SVoIjbQalIjyhZhVhSP:hsTLoWHLBDP+SVoqQaCOxV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24215

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetModuleHandleA CreateDirectoryExW ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc ExitThread GetCurrentProcess RtlCaptureContext InterlockedCompareExchange GetFileTime lstrcatA GetBinaryTypeA SearchPathW AddConsoleAliasW SetProcessPriorityBoost EndUpdateResourceA FindNextFileA FindFirstVolumeA LocalShrink GlobalFlags _llseek UpdateResourceA CreateActCtxW CopyFileW FindFirstFileW FreeEnvironmentStringsW SetErrorMode InterlockedIncrement MoveFileWithProgressA GetTickCount SetLastError GetPrivateProfileStructA VerifyVersionInfoW LoadLibraryA GetLastError HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

gdi32

SetBrushOrgEx

Sharing