file[.]exe | Triage™

General

Target
file.exe
Size 276KB
Sample230109-k8f6ladf59
SHA256 1451a0f2e460b48501858b7fe3003adc384d244d1aa8f3a5d59a9fbffe57bb7f
MD5 b69ea7e849689a5fd4a6fc58585c25d6
SHA1 93c0932fafb2581886e230593dc2f6ed9fde39dc
SHA512 3c7ecf3085d8258ff0d7603349d889a341801b572ed03a2315ef1ab067724b021587f9aa24fd82cac3154b88aa2f17ec7d1444a00b56205f19d690df29f13b6d
SSDEEP 3072:f2XOyApaTSmL0/E2H56SNrU0MnqTSbSU9wpTHC:mipaTzL411NY07SuU9wV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 276KB

file.exe

IMPHASH 9336bf24fe94c66d29758cd42e96c2db
SHA256 1451a0f2e460b48501858b7fe3003adc384d244d1aa8f3a5d59a9fbffe57bb7f
MD5 b69ea7e849689a5fd4a6fc58585c25d6
SHA1 93c0932fafb2581886e230593dc2f6ed9fde39dc
SHA512 3c7ecf3085d8258ff0d7603349d889a341801b572ed03a2315ef1ab067724b021587f9aa24fd82cac3154b88aa2f17ec7d1444a00b56205f19d690df29f13b6d
SSDEEP 3072:f2XOyApaTSmL0/E2H56SNrU0MnqTSbSU9wpTHC:mipaTzL411NY07SuU9wV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27165

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW LoadLibraryA SetComputerNameW WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetConsoleTitleW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA GlobalAddAtomW DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA InterlockedIncrement ReadConsoleA TlsGetValue OpenMutexA SetCriticalSectionSpinCount GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess WriteFile GetModuleFileNameA SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle WideCharToMultiByte GetModuleHandleA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers SetEndOfFile GetProcessHeap HeapSize GetConsoleOutputCP

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted GetNumberOfEventLogRecords

Sharing