file[.]exe | Triage™

General

Target
file.exe
Size 310KB
Sample230107-e38e1agb7w
SHA256 93de16bcf457b70d7560f20677998262f9290568825304a825dd58d256ca87e1
MD5 6088b3e371bdb0a61e8a706f63fe152e
SHA1 af8b7d9745e6699fce58d5ce44b9e927e9509813
SHA512 a4415e1d71e302782a705bd1fd28b6d4045db0465422c67f9204ef0f4f0821ff4fe95a1de3089a35b0093821e0df88642fca061639228472449114b35ea00639
SSDEEP 6144:aTL/wh68dbzVB2AuMMz/zET38j45eB8i6Wb93Y:aTbwhdd/P5rMz/O3/MKiH3Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 310KB

file.exe

IMPHASH b9fa114a16131fe7246a223464c754b0
SHA256 93de16bcf457b70d7560f20677998262f9290568825304a825dd58d256ca87e1
MD5 6088b3e371bdb0a61e8a706f63fe152e
SHA1 af8b7d9745e6699fce58d5ce44b9e927e9509813
SHA512 a4415e1d71e302782a705bd1fd28b6d4045db0465422c67f9204ef0f4f0821ff4fe95a1de3089a35b0093821e0df88642fca061639228472449114b35ea00639
SSDEEP 6144:aTL/wh68dbzVB2AuMMz/zET38j45eB8i6Wb93Y:aTbwhdd/P5rMz/O3/MKiH3Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23846

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedIncrement SetEvent GetModuleHandleW ReadConsoleW GetPriorityClass GetConsoleCP GetSystemWindowsDirectoryA GetFileAttributesA GetConsoleAliasW Beep WriteConsoleW GetConsoleFontSize GetEnvironmentVariableA ReleaseActCtx SetLastError GetProcAddress VirtualAlloc DeleteVolumeMountPointA LoadLibraryA OpenMutexA WriteConsoleA AddVectoredExceptionHandler SetCommMask FindFirstChangeNotificationA FreeEnvironmentStringsW VirtualProtect GetFileAttributesExW GetCurrentThreadId GetCPInfoExA GlobalAddAtomW DebugBreak FindActCtxSectionStringW OpenFileMappingA LCMapStringW TlsGetValue GetProcessIoCounters SetComputerNameA SetCriticalSectionSpinCount MultiByteToWideChar GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode RtlUnwind GetModuleHandleA HeapSize RaiseException SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted

Sharing