file[.]exe | Triage™

General

Target
file.exe
Size 433KB
Sample230106-2zjc2acb82
SHA256 5edcb1ddbf28737689a1eb1bbfa8b0a91aad128ef3713b6c390cdc404fe963c9
MD5 abbe832b63db6d14b6caf057242f9331
SHA1 459178d28384430f766a5dc92c77c519594f7d64
SHA512 1bfe7f1a2a3623e372325fc481b6165c17b46dc02e5e4f1e99fa8b02c12a01c12ed73e151499a55ba5ad40f13a5f268790d647ab548deb93004e899815305c82
SSDEEP 12288:UDv5HX8G9oZFLpteNtQrOgAGZ/f+G8y8/S:UDBX5GFLHeN6rOSZ+G2/S
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 433KB

file.exe

IMPHASH b9fa114a16131fe7246a223464c754b0
SHA256 5edcb1ddbf28737689a1eb1bbfa8b0a91aad128ef3713b6c390cdc404fe963c9
MD5 abbe832b63db6d14b6caf057242f9331
SHA1 459178d28384430f766a5dc92c77c519594f7d64
SHA512 1bfe7f1a2a3623e372325fc481b6165c17b46dc02e5e4f1e99fa8b02c12a01c12ed73e151499a55ba5ad40f13a5f268790d647ab548deb93004e899815305c82
SSDEEP 12288:UDv5HX8G9oZFLpteNtQrOgAGZ/f+G8y8/S:UDBX5GFLHeN6rOSZ+G2/S
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23862

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedIncrement SetEvent GetModuleHandleW ReadConsoleW GetPriorityClass GetConsoleCP GetSystemWindowsDirectoryA GetFileAttributesA GetConsoleAliasW Beep WriteConsoleW GetConsoleFontSize GetEnvironmentVariableA ReleaseActCtx SetLastError GetProcAddress VirtualAlloc DeleteVolumeMountPointA LoadLibraryA OpenMutexA WriteConsoleA AddVectoredExceptionHandler SetCommMask FindFirstChangeNotificationA FreeEnvironmentStringsW VirtualProtect GetFileAttributesExW GetCurrentThreadId GetCPInfoExA GlobalAddAtomW DebugBreak FindActCtxSectionStringW OpenFileMappingA LCMapStringW TlsGetValue GetProcessIoCounters SetComputerNameA SetCriticalSectionSpinCount MultiByteToWideChar GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode RtlUnwind GetModuleHandleA HeapSize RaiseException SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted

Sharing