file[.]exe | Triage™

General

Target
file.exe
Size 319KB
Sample230107-ltxepsdc42
SHA256 da63b0bf578ba3669edc42df4e4d960703624c71590f5d9b7d73e9161d0781db
MD5 ceda611d350ba9f937f9b0d04b7db26c
SHA1 454da29da70d8aa7cfbcf824b3cc1679c15c55f3
SHA512 b4503910ba01802f0eb6ef103ab078f5a3aded0e7f6db6fd7d80af5bcb27501bf0aea6b0060d080d7d68f5c73cb6b74710f129d1dbaed8c20dda7e9fe80c7f2f
SSDEEP 3072:oWXgtqLjX1rIhrz5lgc9n2e7XUSo9mQ3u7ewbMK7xtvUOItoExH4i6zSbFL:PjLjFkYU2apqZwbMS/s1xYi6Wb
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 319KB

file.exe

IMPHASH 60df42fe8b7491613962c4519fc625cb
SHA256 da63b0bf578ba3669edc42df4e4d960703624c71590f5d9b7d73e9161d0781db
MD5 ceda611d350ba9f937f9b0d04b7db26c
SHA1 454da29da70d8aa7cfbcf824b3cc1679c15c55f3
SHA512 b4503910ba01802f0eb6ef103ab078f5a3aded0e7f6db6fd7d80af5bcb27501bf0aea6b0060d080d7d68f5c73cb6b74710f129d1dbaed8c20dda7e9fe80c7f2f
SSDEEP 3072:oWXgtqLjX1rIhrz5lgc9n2e7XUSo9mQ3u7ewbMK7xtvUOItoExH4i6zSbFL:PjLjFkYU2apqZwbMS/s1xYi6Wb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23150

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedIncrement SetEvent GetModuleHandleW ReadConsoleW GetPriorityClass GetConsoleCP GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetConsoleFontSize GetEnvironmentVariableA ReleaseActCtx SetLastError GetProcAddress VirtualAlloc SetComputerNameA DeleteVolumeMountPointA LoadLibraryA OpenMutexA WriteConsoleA AddVectoredExceptionHandler SetCommMask FindFirstChangeNotificationA FreeEnvironmentStringsW GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCurrentThreadId GetCPInfoExA GlobalAddAtomW DebugBreak FindActCtxSectionStringW OpenFileMappingA LCMapStringW TlsGetValue GetProcessIoCounters SetCriticalSectionSpinCount MultiByteToWideChar GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA RaiseException SetStdHandle GetConsoleOutputCP HeapSize CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted

Sharing