file[.]exe | Triage™

General

Target
file.exe
Size 319KB
Sample230103-trytrafb8v
SHA256 2c98d72eb39b452488d267b7b90000f1c35feb97736f8ae206a7d284aa3cb5f3
MD5 9ef8dd8308e8d742f456fd7a2e3601f1
SHA1 e9a9c353c381080ce9a3da8b828c4a6e14cdfc89
SHA512 97c426f8c7ff87feee8a2fd00a7f5c12f4f7cb647bc0784f94caf611f4214021ff3c26f4bbc12cb7a4b6fed5d7b34422867d2f58e43decd7c98cc19598a19a5d
SSDEEP 6144:6L41iTSj9x7z1xpBrCDeswaIOk+1FjAXTM4xVe+ew:6c1iTSn7z7pZO/FWTMEQ+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 319KB

file.exe

IMPHASH b9246a6f0590807e911f84af26b683e4
SHA256 2c98d72eb39b452488d267b7b90000f1c35feb97736f8ae206a7d284aa3cb5f3
MD5 9ef8dd8308e8d742f456fd7a2e3601f1
SHA1 e9a9c353c381080ce9a3da8b828c4a6e14cdfc89
SHA512 97c426f8c7ff87feee8a2fd00a7f5c12f4f7cb647bc0784f94caf611f4214021ff3c26f4bbc12cb7a4b6fed5d7b34422867d2f58e43decd7c98cc19598a19a5d
SSDEEP 6144:6L41iTSj9x7z1xpBrCDeswaIOk+1FjAXTM4xVe+ew:6c1iTSn7z7pZO/FWTMEQ+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16718

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess DeleteVolumeMountPointA EndUpdateResourceW GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount ReadConsoleW TlsSetValue GetConsoleAliasW LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc GetConsoleDisplayMode ResetEvent LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LockResource SetCommMask GetModuleHandleA OpenFileMappingW GetCurrentThreadId MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetLastError EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind HeapSize RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA

user32

WindowFromDC

Sharing