file[.]exe | Triage™

General

Target
file.exe
Size 365KB
Sample230104-xrg3sacg21
SHA256 80662aed81dba632c47288ed28fcfc650bf8b5dc7df59b65ea8fdd26b0b67c00
MD5 2c60078d19864da4215564f7d4c8be63
SHA1 e1143b4f97d5f3f94099dce79fe250b02e848603
SHA512 5d65523951713e07554718622476ababdeb830c120c604786793f89d88644dd4fb42c7cdd533feed1d207bfb5619142c5806af64789dfdc1ec4de82f476368b6
SSDEEP 6144:prLo+naMVaa9NBe7dxK84yoxupmLP51GLYjT:pr7nTxLOvoxupmL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 365KB

file.exe

IMPHASH 85c125029c36db6aaac2403f54b79e02
SHA256 80662aed81dba632c47288ed28fcfc650bf8b5dc7df59b65ea8fdd26b0b67c00
MD5 2c60078d19864da4215564f7d4c8be63
SHA1 e1143b4f97d5f3f94099dce79fe250b02e848603
SHA512 5d65523951713e07554718622476ababdeb830c120c604786793f89d88644dd4fb42c7cdd533feed1d207bfb5619142c5806af64789dfdc1ec4de82f476368b6
SSDEEP 6144:prLo+naMVaa9NBe7dxK84yoxupmLP51GLYjT:pr7nTxLOvoxupmL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25502

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW SetEvent FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetCurrentThread ReadConsoleW GetVolumePathNameW LoadLibraryW GetConsoleAliasW GetFileAttributesW MulDiv WriteConsoleW GetEnvironmentVariableA InterlockedExchange ReleaseActCtx GetCPInfoExW SetLastError GetSystemWindowsDirectoryW VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA GetProcessWorkingSetSize SetCommMask FindFirstChangeNotificationA GetFileAttributesExW EndUpdateResourceA GlobalAddAtomW DebugBreak FindActCtxSectionStringW OpenFileMappingA GetConsoleSelectionInfo LCMapStringW TlsGetValue DeleteVolumeMountPointA FindFirstChangeNotificationW RemoveVectoredExceptionHandler SetCriticalSectionSpinCount GetProcAddress GetComputerNameA MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA HeapSize RtlUnwind RaiseException SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenUntrusted BackupEventLogA RegQueryInfoKeyA CloseEventLog

Sharing