file[.]exe | Triage™

General

Target
file.exe
Size 439KB
Sample230107-jw4wfsda98
SHA256 8c24f73166c439b017fb4490921e52cc2ecd8b98cfc645e0c585f0ec121eea17
MD5 5a87d2753764faf18385d3b935b005d7
SHA1 cd44a5e9c5f30b2455936e939217d267e82dd14c
SHA512 01450247e21c7092f2e820116db07cd6597ed2327e087e6955e528c7af19a5553af30e8a3f2da75203db500476314757b9f9734b2b04a30fd46fef3711c47dae
SSDEEP 6144:aJoLCsrtzJNMJo5jwbu0NZ8R4rEF9YAVb+VrfqNtBv45+JJui6Wb:aJoOsrtVSzZ8RYse0b+rYtBQMJoi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 439KB

file.exe

IMPHASH 3d9821d78cc345b3191858f67e267d90
SHA256 8c24f73166c439b017fb4490921e52cc2ecd8b98cfc645e0c585f0ec121eea17
MD5 5a87d2753764faf18385d3b935b005d7
SHA1 cd44a5e9c5f30b2455936e939217d267e82dd14c
SHA512 01450247e21c7092f2e820116db07cd6597ed2327e087e6955e528c7af19a5553af30e8a3f2da75203db500476314757b9f9734b2b04a30fd46fef3711c47dae
SSDEEP 6144:aJoLCsrtzJNMJo5jwbu0NZ8R4rEF9YAVb+VrfqNtBv45+JJui6Wb:aJoOsrtVSzZ8RYse0b+rYtBQMJoi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23150

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedIncrement SetEvent GetModuleHandleW ReadConsoleW GetPriorityClass GetConsoleCP GetSystemWindowsDirectoryA GetFileAttributesA GetConsoleAliasW Beep WriteConsoleW GetConsoleFontSize GetEnvironmentVariableA ReleaseActCtx SetLastError GetProcAddress VirtualAlloc DeleteVolumeMountPointA LoadLibraryA OpenMutexA WriteConsoleA AddVectoredExceptionHandler SetCommMask FindFirstChangeNotificationA FreeEnvironmentStringsW VirtualProtect GetFileAttributesExW GetCurrentThreadId GetCPInfoExA GlobalAddAtomW DebugBreak FindActCtxSectionStringW OpenFileMappingA LCMapStringW TlsGetValue GetProcessIoCounters SetComputerNameA SetCriticalSectionSpinCount MultiByteToWideChar GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA RaiseException SetStdHandle GetConsoleOutputCP HeapSize CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted

Sharing