file[.]exe | Triage™

General

Target
file.exe
Size 458KB
Sample230109-m5pdxadh92
SHA256 b49e1add03e821af2827fc95a776f6dfb4d2528b2bb29480153b58d7299b905d
MD5 69854c553b47f9f698e714d1f0876225
SHA1 b86ce1b7cddbae66e8d44885d7bfd815b02e6e5d
SHA512 972955c0bce7e36cbc2f3a9ddc7ae556c8ac3ffccbe84e243367a612ae6a81a06fce947611dee69f2a861d3c90d8d763532a4309daf12d3c8860d638252577c9
SSDEEP 6144:d4NaF1HDRTuTq4pKkvIugCd2NMW6CSVaTrXFtIxRued79AoQn++g:d40FJDRTQqCIumNMWEaTro7uCmB++g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 458KB

file.exe

IMPHASH 6d09d430a9bad7bdbc7f029079d89785
SHA256 b49e1add03e821af2827fc95a776f6dfb4d2528b2bb29480153b58d7299b905d
MD5 69854c553b47f9f698e714d1f0876225
SHA1 b86ce1b7cddbae66e8d44885d7bfd815b02e6e5d
SHA512 972955c0bce7e36cbc2f3a9ddc7ae556c8ac3ffccbe84e243367a612ae6a81a06fce947611dee69f2a861d3c90d8d763532a4309daf12d3c8860d638252577c9
SSDEEP 6144:d4NaF1HDRTuTq4pKkvIugCd2NMW6CSVaTrXFtIxRued79AoQn++g:d40FJDRTQqCIumNMWEaTro7uCmB++g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27597

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW LoadLibraryA ReadConsoleA WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue OpenMutexA SetCriticalSectionSpinCount GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType Sleep ExitProcess WriteFile GetModuleFileNameA SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap HeapSize GetConsoleOutputCP

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted NotifyChangeEventLog

Sharing