file[.]exe | Triage™

General

Target
file.exe
Size 318KB
Sample230107-mghlfsdc82
SHA256 aebfdf05c9d08439cc5eb3714503a69d1f463d970782d71fb48b6bf37111ae79
MD5 920cdc6273f57b71fb4f1c09e9b53ed7
SHA1 50e481b70732196c70df6f1ea84e4b6c0be9c3d6
SHA512 fbff112ab44fadf35426db34d8cc9f59b306d5bd30d45ecb977220207086ead0c86f8615745b7d56628ea64ff8e0e603f6cfc0880b3280ed40f9b65314143cd8
SSDEEP 3072:lDXnswxLHg1jVvrz549PK2z4b/9hzoz2367ksWMOUQgcp1Wp/yQXEMK7xtvUOIt0:J5xLHalKcf/gzLU0QhQwMS/scQi6Wb
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 318KB

file.exe

IMPHASH 60df42fe8b7491613962c4519fc625cb
SHA256 aebfdf05c9d08439cc5eb3714503a69d1f463d970782d71fb48b6bf37111ae79
MD5 920cdc6273f57b71fb4f1c09e9b53ed7
SHA1 50e481b70732196c70df6f1ea84e4b6c0be9c3d6
SHA512 fbff112ab44fadf35426db34d8cc9f59b306d5bd30d45ecb977220207086ead0c86f8615745b7d56628ea64ff8e0e603f6cfc0880b3280ed40f9b65314143cd8
SSDEEP 3072:lDXnswxLHg1jVvrz549PK2z4b/9hzoz2367ksWMOUQgcp1Wp/yQXEMK7xtvUOIt0:J5xLHalKcf/gzLU0QhQwMS/scQi6Wb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23150

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedIncrement SetEvent GetModuleHandleW ReadConsoleW GetPriorityClass GetConsoleCP GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetConsoleFontSize GetEnvironmentVariableA ReleaseActCtx SetLastError GetProcAddress VirtualAlloc SetComputerNameA DeleteVolumeMountPointA LoadLibraryA OpenMutexA WriteConsoleA AddVectoredExceptionHandler SetCommMask FindFirstChangeNotificationA FreeEnvironmentStringsW GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCurrentThreadId GetCPInfoExA GlobalAddAtomW DebugBreak FindActCtxSectionStringW OpenFileMappingA LCMapStringW TlsGetValue GetProcessIoCounters SetCriticalSectionSpinCount MultiByteToWideChar GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA RaiseException SetStdHandle GetConsoleOutputCP HeapSize CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted

Sharing