file[.]exe | Triage™

General

Target
file.exe
Size 278KB
Sample230109-larp4sdf74
SHA256 189b68dca1a8e4d0ec372e03b3442d09aff6b73928155ec9d4546ef6006427c3
MD5 6ea210bfd858868cd3d16e3c0e5284d4
SHA1 1ed4eab42076ddbd524b701ab345b882a5c19eea
SHA512 961fd229491703fa0fb0619815b7ce80341ffa17b3994a272124d1ed85617c2b68c6de133c9827143bdc6c46db608f32479946ede83329923182dd8a389e6c3d
SSDEEP 3072:7XOWy2p2EapL3dMel5cDX2mgJN4/R2nEYSSMSACdmEF2xU9Q/Wl:Tzp2E4LNF0U4ZK3dzF2xU9y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 278KB

file.exe

IMPHASH 9336bf24fe94c66d29758cd42e96c2db
SHA256 189b68dca1a8e4d0ec372e03b3442d09aff6b73928155ec9d4546ef6006427c3
MD5 6ea210bfd858868cd3d16e3c0e5284d4
SHA1 1ed4eab42076ddbd524b701ab345b882a5c19eea
SHA512 961fd229491703fa0fb0619815b7ce80341ffa17b3994a272124d1ed85617c2b68c6de133c9827143bdc6c46db608f32479946ede83329923182dd8a389e6c3d
SSDEEP 3072:7XOWy2p2EapL3dMel5cDX2mgJN4/R2nEYSSMSACdmEF2xU9Q/Wl:Tzp2E4LNF0U4ZK3dzF2xU9y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27165

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW LoadLibraryA SetComputerNameW WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetConsoleTitleW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA GlobalAddAtomW DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA InterlockedIncrement ReadConsoleA TlsGetValue OpenMutexA SetCriticalSectionSpinCount GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess WriteFile GetModuleFileNameA SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle WideCharToMultiByte GetModuleHandleA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers SetEndOfFile GetProcessHeap HeapSize GetConsoleOutputCP

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted GetNumberOfEventLogRecords

Sharing