file[.]exe | Triage™

General

Target
file.exe
Size 452KB
Sample230103-syl8vsfa8w
SHA256 c05e392a204e651e7655e07bce1f5e9264567ef830b68b773de06bbf23c5eacd
MD5 0c3511c6218e08e14c332c96e7116155
SHA1 b80584b701dd1810d8edb46da1752c81a92d266c
SHA512 3539e7cd4de728fd1dcbb962f038cdac6d9adec391d6fc499d298212771aed0ee7c278e3b02aed8264d255c9268cee370657fd694dbc3d4dac1ec9d78cd63991
SSDEEP 6144:8LwaiAT7s9eECiaLmvom5YKZbWyT9Nkuu/7VfDIBipB1FjAXTM4xVe+ew:8kaiAHTENkW3YYxNS75IcFWTMEQ+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 452KB

file.exe

IMPHASH b9246a6f0590807e911f84af26b683e4
SHA256 c05e392a204e651e7655e07bce1f5e9264567ef830b68b773de06bbf23c5eacd
MD5 0c3511c6218e08e14c332c96e7116155
SHA1 b80584b701dd1810d8edb46da1752c81a92d266c
SHA512 3539e7cd4de728fd1dcbb962f038cdac6d9adec391d6fc499d298212771aed0ee7c278e3b02aed8264d255c9268cee370657fd694dbc3d4dac1ec9d78cd63991
SSDEEP 6144:8LwaiAT7s9eECiaLmvom5YKZbWyT9Nkuu/7VfDIBipB1FjAXTM4xVe+ew:8kaiAHTENkW3YYxNS75IcFWTMEQ+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16718

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess DeleteVolumeMountPointA EndUpdateResourceW GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount ReadConsoleW TlsSetValue GetConsoleAliasW LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc GetConsoleDisplayMode ResetEvent LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LockResource SetCommMask GetModuleHandleA OpenFileMappingW GetCurrentThreadId MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetLastError EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind HeapSize RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA

user32

WindowFromDC

Sharing