file[.]exe | Triage™

General

Target
file.exe
Size 327KB
Sample230109-mpdmgadh46
SHA256 ff1f9e2d1b10598b714f4b0d574b6eba270919f95161da705b40185fffd4a7fa
MD5 9cc90f86e3ce984d87bd131b6bd23a06
SHA1 d1715241a661371a26a347e7c4317f1cf440d512
SHA512 da89f0f005b65840942a058875f95fe18b375cc00e40b95f96494c58a1566f5a9b11a1baf0d79e138a8324a2aeeef5dcf33001f056541ab6e301881e03c452ce
SSDEEP 6144:8haFLyUSiGKPZauHoH8gcued790h7++g:8haFGU7Zar8tuCuZ++g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 327KB

file.exe

IMPHASH 6d09d430a9bad7bdbc7f029079d89785
SHA256 ff1f9e2d1b10598b714f4b0d574b6eba270919f95161da705b40185fffd4a7fa
MD5 9cc90f86e3ce984d87bd131b6bd23a06
SHA1 d1715241a661371a26a347e7c4317f1cf440d512
SHA512 da89f0f005b65840942a058875f95fe18b375cc00e40b95f96494c58a1566f5a9b11a1baf0d79e138a8324a2aeeef5dcf33001f056541ab6e301881e03c452ce
SSDEEP 6144:8haFLyUSiGKPZauHoH8gcued790h7++g:8haFGU7Zar8tuCuZ++g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27597

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW LoadLibraryA ReadConsoleA WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue OpenMutexA SetCriticalSectionSpinCount GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType Sleep ExitProcess WriteFile GetModuleFileNameA SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap HeapSize GetConsoleOutputCP

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted NotifyChangeEventLog

Sharing