file[.]exe | Triage™

General

Target
file.exe
Size 327KB
Sample230109-mpdmgahd4y
SHA256 8586bd3cbb73c54ccafd21358a7f2000bc945aa2d01fbcef096b9266e343d92b
MD5 6594f6ca92a8bfe497dc73dcca574330
SHA1 d38c0d2f52a61c60b01e99e413ce6e38942476cd
SHA512 b247f37285bc3bb113833d66d39fd018edabece069d94f0584bed589fee1e5bd05983d956edeff1162fe80fa50d25f5292836ff1232ecd4c898d86b3f28f493e
SSDEEP 6144:gxfFkFn6ktIDHVAEgBXuDlCHcued79ngPRF4w++g:gxfF6nx2DHOzwD7uCRgPv++g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 327KB

file.exe

IMPHASH 6d09d430a9bad7bdbc7f029079d89785
SHA256 8586bd3cbb73c54ccafd21358a7f2000bc945aa2d01fbcef096b9266e343d92b
MD5 6594f6ca92a8bfe497dc73dcca574330
SHA1 d38c0d2f52a61c60b01e99e413ce6e38942476cd
SHA512 b247f37285bc3bb113833d66d39fd018edabece069d94f0584bed589fee1e5bd05983d956edeff1162fe80fa50d25f5292836ff1232ecd4c898d86b3f28f493e
SSDEEP 6144:gxfFkFn6ktIDHVAEgBXuDlCHcued79ngPRF4w++g:gxfF6nx2DHOzwD7uCRgPv++g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27581

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW LoadLibraryA ReadConsoleA WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue OpenMutexA SetCriticalSectionSpinCount GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType Sleep ExitProcess WriteFile GetModuleFileNameA SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap HeapSize GetConsoleOutputCP

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted NotifyChangeEventLog

Sharing