file[.]exe | Triage™

General

Target
file.exe
Size 207KB
Sample230115-d7l7wshe49
SHA256 9f20e49c480a2fe207f6967a71754d1f657cb449dfdbf13548d696a09620ba24
MD5 81b9dae7a177f25da00c963d9159f7c8
SHA1 9527895fe878b29c84cfe2ec6d4e31ce05e96ce5
SHA512 7ae874b0822adcd2e4aab4397bf2ed07792d2753e0f9d739c9a873d3a273c8169b2fd89f43072af8bae5c7ce01aeb531b019eff4268ccce58c31cdc4e9e70202
SSDEEP 3072:yXwk82HYFexPDA5uqYpmCDGhctcnmCOxQapb:yxHYFeZNqYpm3hctPC2p
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 207KB

file.exe

IMPHASH e3155d9cfab86b6c5c15edea4a8741d5
SHA256 9f20e49c480a2fe207f6967a71754d1f657cb449dfdbf13548d696a09620ba24
MD5 81b9dae7a177f25da00c963d9159f7c8
SHA1 9527895fe878b29c84cfe2ec6d4e31ce05e96ce5
SHA512 7ae874b0822adcd2e4aab4397bf2ed07792d2753e0f9d739c9a873d3a273c8169b2fd89f43072af8bae5c7ce01aeb531b019eff4268ccce58c31cdc4e9e70202
SSDEEP 3072:yXwk82HYFexPDA5uqYpmCDGhctcnmCOxQapb:yxHYFeZNqYpm3hctPC2p
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23854

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleTitleW CreateFileW VirtualAlloc GetConsoleAliasW SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExW DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage GetHandleInformation FindNextFileA UnhandledExceptionFilter LoadLibraryW FillConsoleOutputAttribute GlobalFlags GetModuleHandleA CopyFileA CreateActCtxA lstrlenA TlsAlloc CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotW WriteConsoleInputA GetTempPathA InterlockedExchangeAdd EnumTimeFormatsA FindFirstFileW FreeEnvironmentStringsW VerifyVersionInfoW GlobalAlloc GetTickCount SetLastError GetLastError CreateFileA GetNumberOfConsoleInputEvents CompareStringA CreateNamedPipeA LoadLibraryA SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetCursorInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetBrushOrgEx

Sharing