file[.]exe | Triage™

General

Target
file.exe
Size 432KB
Sample230106-1c2enaca35
SHA256 0f656c5c5d2e47f1286e430f74c496d739f9d9282cddc4de2ecc1feb10430a73
MD5 20e37089ced0e3bb1a1a3e01f12754dd
SHA1 08fd04e2599af62f1a41cbf640edfffc804f79cf
SHA512 9bf8c0cb152c4ad2bd7b72fe69feb2f20476df582d83dc9233101b363f6e79c60853cadf78d9155fc7274cddb7c097cc2599bb4a06fa623e9962133d11e6b7c6
SSDEEP 12288:r3xTEGnGGlAYs29gUlOLAxLDBzYK9Ef+11pS:r3NbnreYl3MYvBzxA+/pS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 432KB

file.exe

IMPHASH b9fa114a16131fe7246a223464c754b0
SHA256 0f656c5c5d2e47f1286e430f74c496d739f9d9282cddc4de2ecc1feb10430a73
MD5 20e37089ced0e3bb1a1a3e01f12754dd
SHA1 08fd04e2599af62f1a41cbf640edfffc804f79cf
SHA512 9bf8c0cb152c4ad2bd7b72fe69feb2f20476df582d83dc9233101b363f6e79c60853cadf78d9155fc7274cddb7c097cc2599bb4a06fa623e9962133d11e6b7c6
SSDEEP 12288:r3xTEGnGGlAYs29gUlOLAxLDBzYK9Ef+11pS:r3NbnreYl3MYvBzxA+/pS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23862

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedIncrement SetEvent GetModuleHandleW ReadConsoleW GetPriorityClass GetConsoleCP GetSystemWindowsDirectoryA GetFileAttributesA GetConsoleAliasW Beep WriteConsoleW GetConsoleFontSize GetEnvironmentVariableA ReleaseActCtx SetLastError GetProcAddress VirtualAlloc DeleteVolumeMountPointA LoadLibraryA OpenMutexA WriteConsoleA AddVectoredExceptionHandler SetCommMask FindFirstChangeNotificationA FreeEnvironmentStringsW VirtualProtect GetFileAttributesExW GetCurrentThreadId GetCPInfoExA GlobalAddAtomW DebugBreak FindActCtxSectionStringW OpenFileMappingA LCMapStringW TlsGetValue GetProcessIoCounters SetComputerNameA SetCriticalSectionSpinCount MultiByteToWideChar GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode RtlUnwind GetModuleHandleA HeapSize RaiseException SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted

Sharing