file[.]exe | Triage™

General

Target
file.exe
Size 362KB
Sample230105-ds2n2aag45
SHA256 cecb830c2f302dc4400bdde5a8a9381dea71488e328ebade0f1b53d68a7cfdd7
MD5 e210f9cfde5adaae6b4590826888a4fb
SHA1 6e041a73502f24df9e00d697dc10320b9660ad1e
SHA512 fd55e9bceafc7ac88824516eb5cbc675f74a6137d7d1d817b9aeee7ec320a552d74a2d74c59de0fe7eac65bf767a8eaf48ce6b366bfd8960e2b827212d915cf0
SSDEEP 3072:FtXqvQQLxlL0IUff5nFa/uIZUgWxwRLeWrPkxjGkv6o6UGY8jdA4upFldiLLk9XH:zELxDUffuuI72qMxiHCoxupmLnbBEjT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 362KB

file.exe

IMPHASH c9ec3d10eeacac49f6e80fae8eca27e7
SHA256 cecb830c2f302dc4400bdde5a8a9381dea71488e328ebade0f1b53d68a7cfdd7
MD5 e210f9cfde5adaae6b4590826888a4fb
SHA1 6e041a73502f24df9e00d697dc10320b9660ad1e
SHA512 fd55e9bceafc7ac88824516eb5cbc675f74a6137d7d1d817b9aeee7ec320a552d74a2d74c59de0fe7eac65bf767a8eaf48ce6b366bfd8960e2b827212d915cf0
SSDEEP 3072:FtXqvQQLxlL0IUff5nFa/uIZUgWxwRLeWrPkxjGkv6o6UGY8jdA4upFldiLLk9XH:zELxDUffuuI72qMxiHCoxupmLnbBEjT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25134

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ZombifyActCtx GetSystemWindowsDirectoryW GetComputerNameW SetEvent FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetCurrentThread ReadConsoleW GetVolumePathNameW LoadLibraryW DeleteVolumeMountPointW GetConsoleAliasW GetFileAttributesW MulDiv WriteConsoleW LCMapStringA InterlockedExchange GlobalAddAtomA SetLastError GetProcAddress VirtualAlloc SetComputerNameA LoadLibraryA OpenMutexA WriteConsoleA GetProcessWorkingSetSize SetCommMask FindFirstChangeNotificationA GetFileAttributesExW EndUpdateResourceA DebugBreak FindActCtxSectionStringW OpenFileMappingA GetConsoleSelectionInfo TlsGetValue RemoveVectoredExceptionHandler SetCriticalSectionSpinCount GetCPInfoExW GetEnvironmentVariableW GetLastError HeapFree MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA HeapSize SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

advapi32

BackupEventLogA RegQueryInfoKeyA DeregisterEventSource IsTokenUntrusted

Sharing