file[.]exe | Triage™

General

Target
file.exe
Size 320KB
Sample230103-wek38scc28
SHA256 36995811790459ca4fa58c26b47febebe3b2cc259389923b8cf64bfacf62c389
MD5 7c35d58593606d2635840cbd3e63bab5
SHA1 d0f338d24ea891220c97aea99cde1856b40d2f32
SHA512 ea5a19c0ba8481607b9a0c517f2de99bc5779d5be3932a59b7e75bbb01b37ea2ce5164b283610d487cb717609562a117cada0fc82a426d0d3e53e28be44690bc
SSDEEP 3072:6y7yLv95RC5/Y7YM2blNlt77sevM6f/5iXKAxDFRcAGtjkyGJ8arb24cNHYcQXHV:T+LXRz2xXRf/0XXD3cAyjEvJEMrb
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 320KB

file.exe

IMPHASH f124528fdca02f6dcbbaf9b4c5b716ac
SHA256 36995811790459ca4fa58c26b47febebe3b2cc259389923b8cf64bfacf62c389
MD5 7c35d58593606d2635840cbd3e63bab5
SHA1 d0f338d24ea891220c97aea99cde1856b40d2f32
SHA512 ea5a19c0ba8481607b9a0c517f2de99bc5779d5be3932a59b7e75bbb01b37ea2ce5164b283610d487cb717609562a117cada0fc82a426d0d3e53e28be44690bc
SSDEEP 3072:6y7yLv95RC5/Y7YM2blNlt77sevM6f/5iXKAxDFRcAGtjkyGJ8arb24cNHYcQXHV:T+LXRz2xXRf/0XXD3cAyjEvJEMrb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16702

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess FreeResource DeleteVolumeMountPointA EndUpdateResourceW GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount ReadConsoleW TlsSetValue LoadLibraryW GetConsoleAliasW LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc GetConsoleDisplayMode ResetEvent LoadLibraryA WriteConsoleA GetProcessWorkingSetSize SetCommMask GetModuleHandleA OpenFileMappingW GetCurrentThreadId MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetLastError EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind HeapSize RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA

Sharing