file[.]exe | Triage™

General

Target
file.exe
Size 278KB
Sample230109-mbyeqahc81
SHA256 ab9aa981e24b6dbe183fff66d17e38fbb7ac1fa54fd1dbf3c4878c65ff18efa4
MD5 a1f66097ac90ff53d13dc4fbf767b971
SHA1 f00529db63fde1d41c03c38813296b6aaada456d
SHA512 c882f5872b48cc59f652459c616ebce2c5fe46688cacd098b37351b8218d68cc868106e7def960ee47c3e9ced3f47aa1322747d2a75fbaf235683d02e3b91bc8
SSDEEP 3072:fAXOp3r0pVw56LxDVsp55jcMiRfnzf+1DmR5RZPy/7gk9ZNp+Y:f043QpVwMLFGNQzRvK1u4/7gk9ZNj
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 278KB

file.exe

IMPHASH 17d18d5591908288fa5663f6af8411bb
SHA256 ab9aa981e24b6dbe183fff66d17e38fbb7ac1fa54fd1dbf3c4878c65ff18efa4
MD5 a1f66097ac90ff53d13dc4fbf767b971
SHA1 f00529db63fde1d41c03c38813296b6aaada456d
SHA512 c882f5872b48cc59f652459c616ebce2c5fe46688cacd098b37351b8218d68cc868106e7def960ee47c3e9ced3f47aa1322747d2a75fbaf235683d02e3b91bc8
SSDEEP 3072:fAXOp3r0pVw56LxDVsp55jcMiRfnzf+1DmR5RZPy/7gk9ZNp+Y:f043QpVwMLFGNQzRvK1u4/7gk9ZNj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27213

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW ReadConsoleA OpenMutexA WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetConsoleTitleW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue LoadLibraryA SetCriticalSectionSpinCount GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess WriteFile GetModuleFileNameA SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle WideCharToMultiByte GetModuleHandleA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers SetEndOfFile GetProcessHeap HeapSize GetConsoleOutputCP

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted GetNumberOfEventLogRecords

Sharing