file[.]exe | Triage™

General

Target
file.exe
Size 471KB
Sample230103-n7fp8abc78
SHA256 9bec46117621880ddd05c188cb2ee680accdc369e0ed94e258b71ebbd099d3af
MD5 cbae208afb0dc20711c2e59f41ac555e
SHA1 d65763914bd792a9717631490647b2f7e84defd5
SHA512 38403fae09f4dbcb71e3738afe5d151d5a5380e3d410a02f8cf5f902cb0dc51e2620b38fe17e521314740368729bf90b9107b564c1716c5564dedd3ace25cf96
SSDEEP 6144:DLwNUs37jvrM8I5OH+gXd4OSiiWfTwR6GCswwnK0kbb/jAWTM4xVvkHb+ew:D8NUsLjvrnJHr7wR6rwK9/XTMENi+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 471KB

file.exe

IMPHASH 827b2aefd23a3c76bbfc7b8c8ebe149c
SHA256 9bec46117621880ddd05c188cb2ee680accdc369e0ed94e258b71ebbd099d3af
MD5 cbae208afb0dc20711c2e59f41ac555e
SHA1 d65763914bd792a9717631490647b2f7e84defd5
SHA512 38403fae09f4dbcb71e3738afe5d151d5a5380e3d410a02f8cf5f902cb0dc51e2620b38fe17e521314740368729bf90b9107b564c1716c5564dedd3ace25cf96
SSDEEP 6144:DLwNUs37jvrM8I5OH+gXd4OSiiWfTwR6GCswwnK0kbb/jAWTM4xVvkHb+ew:D8NUsLjvrnJHr7wR6rwK9/XTMENi+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16750

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess DeleteVolumeMountPointA EndUpdateResourceW GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount ReadConsoleW TlsSetValue LoadLibraryW GetConsoleAliasW WriteConsoleW LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc ResetEvent LoadLibraryA GetProcessWorkingSetSize SetConsoleDisplayMode LockResource SetCommMask GetModuleHandleA OpenFileMappingW GetCurrentThreadId MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetLastError EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind HeapSize RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP SetFilePointer SetStdHandle CreateFileA

user32

WindowFromDC

Sharing