file[.]exe | Triage™

General

Target
file.exe
Size 206KB
Sample230115-j4earscb83
SHA256 7415602629817343a2ea89ce6bec8075f46a25e523f9efbfec07bdfb7cb4c1e3
MD5 17e0bf3b1d8c050fb0d7ad799a6ce358
SHA1 3d83fe29c66ac54d3b8d2322fec77c590287311a
SHA512 b7370ace58bfd25f5c75714562f11e58b604207fe86a370da7efdfd3f7af722d89036e039cd705418cc8b74a04c0c42ebb9b13ddf618c7b3852b279c3c572c56
SSDEEP 3072:BXtSyLXQ4FSWFHUo5EZghhuypgtCtoeMpB5s6QA8n0Mx/R02apb:ltXQ4FSYH3KO7MXW30jp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 206KB

file.exe

IMPHASH e3155d9cfab86b6c5c15edea4a8741d5
SHA256 7415602629817343a2ea89ce6bec8075f46a25e523f9efbfec07bdfb7cb4c1e3
MD5 17e0bf3b1d8c050fb0d7ad799a6ce358
SHA1 3d83fe29c66ac54d3b8d2322fec77c590287311a
SHA512 b7370ace58bfd25f5c75714562f11e58b604207fe86a370da7efdfd3f7af722d89036e039cd705418cc8b74a04c0c42ebb9b13ddf618c7b3852b279c3c572c56
SSDEEP 3072:BXtSyLXQ4FSWFHUo5EZghhuypgtCtoeMpB5s6QA8n0Mx/R02apb:ltXQ4FSYH3KO7MXW30jp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23854

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleTitleW CreateFileW VirtualAlloc GetConsoleAliasW SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExW DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage GetHandleInformation FindNextFileA UnhandledExceptionFilter LoadLibraryW FillConsoleOutputAttribute GlobalFlags GetModuleHandleA CopyFileA CreateActCtxA lstrlenA TlsAlloc CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotW WriteConsoleInputA GetTempPathA InterlockedExchangeAdd EnumTimeFormatsA FindFirstFileW FreeEnvironmentStringsW VerifyVersionInfoW GlobalAlloc GetTickCount SetLastError GetLastError CreateFileA GetNumberOfConsoleInputEvents CompareStringA CreateNamedPipeA LoadLibraryA SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetCursorInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetBrushOrgEx

Sharing