file[.]exe | Triage™

General

Target
file.exe
Size 442KB
Sample230107-e5yzcacf97
SHA256 3f48a68d9d7693b5de21dcfa91bff9d6e4b5debc8be1c28be20ac697e31e6e4d
MD5 6399b3b615b36bb16110859d3aaa82fe
SHA1 0ec12678ec4c6733c3e3b2a7c4f6f3a91e3c76c2
SHA512 d70ef88f23a0390ed7c76dad47820369200898e77182234a80d4bbe74be7719630147000bbefb90e97be8c9df39671f4373dbcdf03363d1feba6eefdf2c6a6ff
SSDEEP 6144:SsL8k5XlsVZ0aX/EmBWQpfbnAgkMz4CpFmPFM145ELEeYi6Wb93Y:SsIk5Xlo3smBWkAgkMsAUS+6EdiH3Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 442KB

file.exe

IMPHASH b9fa114a16131fe7246a223464c754b0
SHA256 3f48a68d9d7693b5de21dcfa91bff9d6e4b5debc8be1c28be20ac697e31e6e4d
MD5 6399b3b615b36bb16110859d3aaa82fe
SHA1 0ec12678ec4c6733c3e3b2a7c4f6f3a91e3c76c2
SHA512 d70ef88f23a0390ed7c76dad47820369200898e77182234a80d4bbe74be7719630147000bbefb90e97be8c9df39671f4373dbcdf03363d1feba6eefdf2c6a6ff
SSDEEP 6144:SsL8k5XlsVZ0aX/EmBWQpfbnAgkMz4CpFmPFM145ELEeYi6Wb93Y:SsIk5Xlo3smBWkAgkMsAUS+6EdiH3Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23846

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedIncrement SetEvent GetModuleHandleW ReadConsoleW GetPriorityClass GetConsoleCP GetSystemWindowsDirectoryA GetFileAttributesA GetConsoleAliasW Beep WriteConsoleW GetConsoleFontSize GetEnvironmentVariableA ReleaseActCtx SetLastError GetProcAddress VirtualAlloc DeleteVolumeMountPointA LoadLibraryA OpenMutexA WriteConsoleA AddVectoredExceptionHandler SetCommMask FindFirstChangeNotificationA FreeEnvironmentStringsW VirtualProtect GetFileAttributesExW GetCurrentThreadId GetCPInfoExA GlobalAddAtomW DebugBreak FindActCtxSectionStringW OpenFileMappingA LCMapStringW TlsGetValue GetProcessIoCounters SetComputerNameA SetCriticalSectionSpinCount MultiByteToWideChar GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode RtlUnwind GetModuleHandleA HeapSize RaiseException SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted

Sharing