file[.]exe | Triage™

General

Target
file.exe
Size 354KB
Sample230109-h2m98agh4x
SHA256 8038d644a3b5373a0cdbdd0ea8b64cd3e71207b8ae497bc2af10a57f6860ef75
MD5 6e1f45ab241e79fdc888e8dffb1672ec
SHA1 b6a38ca56ea1784d9007c99bbdf9cc38e381d21c
SHA512 96955a5f818c551cfe83e728caa3eadacc58dda9168273c73fc72b5f266239f1d91ef7cc8ce91d1905ec60f4d8d54c80a818dbca5a7f841a5cac8b6ea8621368
SSDEEP 6144:Xsk8GsESLQedUbrKLfIP05XSTf888hWRFCFuedWGq++g:Xsk8xbMedUb7P05+b80tLn++g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 354KB

file.exe

IMPHASH 441a054853da1d6e45c95103bb186929
SHA256 8038d644a3b5373a0cdbdd0ea8b64cd3e71207b8ae497bc2af10a57f6860ef75
MD5 6e1f45ab241e79fdc888e8dffb1672ec
SHA1 b6a38ca56ea1784d9007c99bbdf9cc38e381d21c
SHA512 96955a5f818c551cfe83e728caa3eadacc58dda9168273c73fc72b5f266239f1d91ef7cc8ce91d1905ec60f4d8d54c80a818dbca5a7f841a5cac8b6ea8621368
SSDEEP 6144:Xsk8GsESLQedUbrKLfIP05XSTf888hWRFCFuedWGq++g:Xsk8xbMedUb7P05+b80tLn++g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27110

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW LoadLibraryA SetComputerNameW WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetConsoleTitleW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA GlobalAddAtomW DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA InterlockedIncrement ReadConsoleA TlsGetValue OpenMutexA SetCriticalSectionSpinCount GetLastError HeapFree MultiByteToWideChar GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ReadFile SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA SetStdHandle GetModuleHandleA RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers SetEndOfFile GetProcessHeap HeapSize GetConsoleOutputCP

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted GetNumberOfEventLogRecords

Sharing