file[.]exe | Triage™

General

Target
file.exe
Size 354KB
Sample230109-gvbgeadb77
SHA256 efec07fbc1d3df82dc8f39c152f8d74da43ce2df373166952c9a1db3abf4135f
MD5 2e40b706f95e6b545a19a7cb3b7f4e35
SHA1 7d5f3f05c5b9f16b972a5af6bbb0d80af0b7d5b2
SHA512 2634757e7376e5a3ff990ec970153f77228772c9fab566a8583ac9b2877d307fa0df91a263ed3e6d34a6f0011ab821da47bcb0a1bb386dc08679c14247840554
SSDEEP 6144:pWy8FsrlLDhLogHj30Kv1Yb1FVMWRFCFuedbe++g:pWy8i53hLogrj1cFtt++g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 354KB

file.exe

IMPHASH 441a054853da1d6e45c95103bb186929
SHA256 efec07fbc1d3df82dc8f39c152f8d74da43ce2df373166952c9a1db3abf4135f
MD5 2e40b706f95e6b545a19a7cb3b7f4e35
SHA1 7d5f3f05c5b9f16b972a5af6bbb0d80af0b7d5b2
SHA512 2634757e7376e5a3ff990ec970153f77228772c9fab566a8583ac9b2877d307fa0df91a263ed3e6d34a6f0011ab821da47bcb0a1bb386dc08679c14247840554
SSDEEP 6144:pWy8FsrlLDhLogHj30Kv1Yb1FVMWRFCFuedbe++g:pWy8i53hLogrj1cFtt++g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27110

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW LoadLibraryA SetComputerNameW WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetConsoleTitleW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA GlobalAddAtomW DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA InterlockedIncrement ReadConsoleA TlsGetValue OpenMutexA SetCriticalSectionSpinCount GetLastError HeapFree MultiByteToWideChar GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ReadFile SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA SetStdHandle GetModuleHandleA RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers SetEndOfFile GetProcessHeap HeapSize GetConsoleOutputCP

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted GetNumberOfEventLogRecords

Sharing