file[.]exe | Triage™

General

Target
file.exe
Size 321KB
Sample230103-rg93xsbf39
SHA256 df7c3c9d82d3c84a3878f5bc3bb41bdb334ff09ad31f3ca907811539722d3518
MD5 000b2c9cb6765183451ae41b3c70f19e
SHA1 9d4158412e02419f991dfe311d87df2987741d2d
SHA512 2cad5bb7f0f5d4e5ab5d9ffe775226f366a0597793f62523c4558d3f541b3bc291a0f7af40bb863118b2e9509380899a53dcaf73b366e635efd7db298b3393c8
SSDEEP 6144:HLRmi19xz1pD53xRXcjqrgs1FjAXTM4xVe+ew:HFmi19xzt3ns2rpFWTMEQ+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 321KB

file.exe

IMPHASH b9246a6f0590807e911f84af26b683e4
SHA256 df7c3c9d82d3c84a3878f5bc3bb41bdb334ff09ad31f3ca907811539722d3518
MD5 000b2c9cb6765183451ae41b3c70f19e
SHA1 9d4158412e02419f991dfe311d87df2987741d2d
SHA512 2cad5bb7f0f5d4e5ab5d9ffe775226f366a0597793f62523c4558d3f541b3bc291a0f7af40bb863118b2e9509380899a53dcaf73b366e635efd7db298b3393c8
SSDEEP 6144:HLRmi19xz1pD53xRXcjqrgs1FjAXTM4xVe+ew:HFmi19xzt3ns2rpFWTMEQ+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16718

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess DeleteVolumeMountPointA EndUpdateResourceW GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount ReadConsoleW TlsSetValue GetConsoleAliasW LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc GetConsoleDisplayMode ResetEvent LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LockResource SetCommMask GetModuleHandleA OpenFileMappingW GetCurrentThreadId MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetLastError EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind HeapSize RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA

user32

WindowFromDC

Sharing