file[.]exe | Triage™

General

Target
file.exe
Size 366KB
Sample230104-r9ahrsbh21
SHA256 234311a98ef272ea9a66272eaadaeb49f118eee9b7ebc518aa481bb079032531
MD5 5db190f86f98212779499f6fb6a14324
SHA1 d0d556ec67dd76e2723ed7c9db8230eb9041d150
SHA512 9f1b256846cff38186f868bf2cc7ad1ce388229e5ff06c6b42f48d4df84864654ddede27bb2bd4c2ea49bcb841231e461c8c5c62f5f184b6b8d998185513320a
SSDEEP 6144:7pLM8AABaKGj1pGPwMDVfT9oxupmLUjlogf3xjT:7pBAsYbGPn9oxupmLUZn3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 366KB

file.exe

IMPHASH 9ec1d77cd847f96c59fd98d884b6c73b
SHA256 234311a98ef272ea9a66272eaadaeb49f118eee9b7ebc518aa481bb079032531
MD5 5db190f86f98212779499f6fb6a14324
SHA1 d0d556ec67dd76e2723ed7c9db8230eb9041d150
SHA512 9f1b256846cff38186f868bf2cc7ad1ce388229e5ff06c6b42f48d4df84864654ddede27bb2bd4c2ea49bcb841231e461c8c5c62f5f184b6b8d998185513320a
SSDEEP 6144:7pLM8AABaKGj1pGPwMDVfT9oxupmLUjlogf3xjT:7pBAsYbGPn9oxupmLUZn3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25566

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW FreeEnvironmentStringsA GetModuleHandleW GetTickCount ReadConsoleW GetVolumePathNameW LoadLibraryW GetConsoleAliasW GetFileAttributesW MulDiv WriteConsoleW GetEnvironmentVariableA InterlockedExchange ReleaseActCtx GetCPInfoExW SetLastError GetProcAddress VirtualAlloc GetSystemWindowsDirectoryW LoadLibraryA OpenMutexA WriteConsoleA GetProcessWorkingSetSize AddVectoredExceptionHandler SetCommMask FindFirstChangeNotificationA OpenFileMappingW VirtualProtect GetFileAttributesExW WaitForDebugEvent GetCurrentThreadId EndUpdateResourceA FindActCtxSectionStringW GetConsoleSelectionInfo LCMapStringW DeleteVolumeMountPointA GlobalAddAtomA TlsGetValue FindFirstChangeNotificationW SetCriticalSectionSpinCount ResetEvent GetComputerNameA MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA HeapSize RtlUnwind RaiseException SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenUntrusted BackupEventLogA RegQueryInfoKeyA CloseEventLog

Sharing