file[.]exe | Triage™

General

Target
file.exe
Size 342KB
Sample230104-a4mgpsdd77
SHA256 efa35da26e2c21149a9be5e3787d39911ab7e08f435f95099f468b586ebc71d4
MD5 3bea8a2261b2cae191a0b7501aaed07b
SHA1 68bf79c87ac58e238e48ec177d3b8984a82bc060
SHA512 fe33e758d26d9937fde33860ea1c88b008bcb7c52e3dface4a2aad1012f26dd8001e74347f6d7f44f2be13e5e847b036955e8fdb8f5cb9f79ce265932453a482
SSDEEP 6144:Uk5L/xG5BH1he4O9OMWKlDycAyjFvJEMbx5rb:35r45h1h5iWGDPAyxfV5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 342KB

file.exe

IMPHASH 7ee289e4925dac0bb3762646578db625
SHA256 efa35da26e2c21149a9be5e3787d39911ab7e08f435f95099f468b586ebc71d4
MD5 3bea8a2261b2cae191a0b7501aaed07b
SHA1 68bf79c87ac58e238e48ec177d3b8984a82bc060
SHA512 fe33e758d26d9937fde33860ea1c88b008bcb7c52e3dface4a2aad1012f26dd8001e74347f6d7f44f2be13e5e847b036955e8fdb8f5cb9f79ce265932453a482
SSDEEP 6144:Uk5L/xG5BH1he4O9OMWKlDycAyjFvJEMbx5rb:35r45h1h5iWGDPAyxfV5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26094

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW GetSystemWindowsDirectoryW GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount ReadConsoleW LoadLibraryW GetConsoleAliasW LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc GetConsoleDisplayMode GlobalAddAtomA ResetEvent LoadLibraryA WriteConsoleA SetProcessWorkingSetSize SetCommMask GetModuleHandleA FindFirstChangeNotificationA ContinueDebugEvent OpenFileMappingW VirtualProtect GetCurrentThreadId GetConsoleSelectionInfo TlsGetValue DeleteVolumeMountPointA FreeResource GetComputerNameA FlushFileBuffers MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapReAlloc LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RtlUnwind RaiseException SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

advapi32

BackupEventLogW CloseEventLog

winhttp

WinHttpOpen WinHttpReadData

Sharing