file[.]exe | Triage™

General

Target
file.exe
Size 352KB
Sample230109-jptf5sha2x
SHA256 afb11a980b0565b1154d2e4270af60adaea042f4c65b09030df588a28e4e9247
MD5 ffdb5356486879d9b45d264117a19880
SHA1 0f3153eda81249cdf6ba13f50a01708a7eb2b466
SHA512 979ec2ca10ecd46baf18d23619a77b694c81f73fc3f4b4bf663896f43323a362b3da445c270e7001334320d4586c1e5e8e1cb3f834a871fe915892b395ebc1dd
SSDEEP 3072:CXO7ypJrDvL1tMfc5lh/ACv5Wj9S4UjcMnbvWROaVQ5BtuTqdlAGb2FVx+dFhKh9:CxpJrDLrE6hpv5rXjlWRFCFuedY++g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 352KB

file.exe

IMPHASH 9336bf24fe94c66d29758cd42e96c2db
SHA256 afb11a980b0565b1154d2e4270af60adaea042f4c65b09030df588a28e4e9247
MD5 ffdb5356486879d9b45d264117a19880
SHA1 0f3153eda81249cdf6ba13f50a01708a7eb2b466
SHA512 979ec2ca10ecd46baf18d23619a77b694c81f73fc3f4b4bf663896f43323a362b3da445c270e7001334320d4586c1e5e8e1cb3f834a871fe915892b395ebc1dd
SSDEEP 3072:CXO7ypJrDvL1tMfc5lh/ACv5Wj9S4UjcMnbvWROaVQ5BtuTqdlAGb2FVx+dFhKh9:CxpJrDLrE6hpv5rXjlWRFCFuedY++g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27165

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW LoadLibraryA SetComputerNameW WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetConsoleTitleW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA GlobalAddAtomW DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA InterlockedIncrement ReadConsoleA TlsGetValue OpenMutexA SetCriticalSectionSpinCount GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess WriteFile GetModuleFileNameA SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle WideCharToMultiByte GetModuleHandleA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers SetEndOfFile GetProcessHeap HeapSize GetConsoleOutputCP

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted GetNumberOfEventLogRecords

Sharing