file[.]exe | Triage™

General

Target
file.exe
Size 373KB
Sample230109-mqh9cadh49
SHA256 aded3194fe3b8734ee021f6e4ce81fc207b6e258c96ceb9bf2e1f77eccc4a87f
MD5 b198053516ba4d4e08845801c72bbc2e
SHA1 b99bfd025bf823dac6c7e18e58401e6311c3d5b3
SHA512 211bc640c90eac11f89f4ef522d2c27b17c9a67515b0c7ce143c9c49b5be24154de53a8a0f3a91d9730d0ba5f7eb26c314d39a6728e682671d95fe8febff312e
SSDEEP 6144:AfOxpxZDLEBWVzdM7dGqb9DWkdxRxiPgi1X3BxlRoPrg:a6pDDwBWVURb9DvdxRgPnhxXCg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 373KB

file.exe

IMPHASH 17d18d5591908288fa5663f6af8411bb
SHA256 aded3194fe3b8734ee021f6e4ce81fc207b6e258c96ceb9bf2e1f77eccc4a87f
MD5 b198053516ba4d4e08845801c72bbc2e
SHA1 b99bfd025bf823dac6c7e18e58401e6311c3d5b3
SHA512 211bc640c90eac11f89f4ef522d2c27b17c9a67515b0c7ce143c9c49b5be24154de53a8a0f3a91d9730d0ba5f7eb26c314d39a6728e682671d95fe8febff312e
SSDEEP 6144:AfOxpxZDLEBWVzdM7dGqb9DWkdxRxiPgi1X3BxlRoPrg:a6pDDwBWVURb9DvdxRgPnhxXCg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27213

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW ReadConsoleA OpenMutexA WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetConsoleTitleW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue LoadLibraryA SetCriticalSectionSpinCount GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess WriteFile GetModuleFileNameA SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle WideCharToMultiByte GetModuleHandleA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers SetEndOfFile GetProcessHeap HeapSize GetConsoleOutputCP

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted GetNumberOfEventLogRecords

Sharing