file[.]exe | Triage™

General

Target
file.exe
Size 266KB
Sample230113-znqa4aha21
SHA256 de3aad13ea0f1ca31ed92168178b95b7751f00539080fe921a86672e76cc98bd
MD5 06a15bac5378dd6b7c37c162e27daf97
SHA1 88dcd8f9f77f354f72bd7992486350f2efb40cc7
SHA512 39938a145c3506482594c7960d67401abac58b8ae776ac190501374ff348f32091e0189b0bb403d89933f973d969baf402e0e7754077ac8afaaa2a473fdc7723
SSDEEP 6144:xUs4LYXSZKEKMpZaLN9/6Le1USLCDJZ9tzrSA3:xUs4+SZL86y1ULZ9P3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 266KB

file.exe

IMPHASH f63e5dc8a19324470a8b9bbcea9f4b04
SHA256 de3aad13ea0f1ca31ed92168178b95b7751f00539080fe921a86672e76cc98bd
MD5 06a15bac5378dd6b7c37c162e27daf97
SHA1 88dcd8f9f77f354f72bd7992486350f2efb40cc7
SHA512 39938a145c3506482594c7960d67401abac58b8ae776ac190501374ff348f32091e0189b0bb403d89933f973d969baf402e0e7754077ac8afaaa2a473fdc7723
SSDEEP 6144:xUs4LYXSZKEKMpZaLN9/6Le1USLCDJZ9tzrSA3:xUs4+SZL86y1ULZ9P3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29335

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnregisterWait IsBadStringPtrW FindResourceExW GlobalAddAtomA EndUpdateResourceW InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap GetGeoInfoW FindActCtxSectionStringA WideCharToMultiByte SetSystemTimeAdjustment LeaveCriticalSection GetFileAttributesA FlushInstructionCache GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA DnsHostnameToComputerNameA GetCommMask SetCommMask SetConsoleCursorInfo lstrcmpiW GetModuleHandleA OpenFileMappingW BuildCommDCBA GetConsoleSelectionInfo LCMapStringW InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

GetDC

Sharing