file[.]exe | Triage™

General

Target
file.exe
Size 207KB
Sample230115-paandaee23
SHA256 48b4ff898e65dd405ba6df853ab6bab8bb9a30a2aa5f06ed3782d92194791a71
MD5 40852cf253e70e0a5024e429af3178ad
SHA1 8a69fb88a4f56003c212a26f55f6114c17c19233
SHA512 0a15c5acb587b7a393dbf5f984dccb124677e2f7d842f720d4d53362afb8eeeabffc6673252ff2c90c0058521e28af769354aea88650bca90a290cd7f62edafa
SSDEEP 3072:YXtyMOFlm5I5tIEPjE3W4hOmlNYu6WCHPcU8i:se6maW4wS6u/Ck
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 207KB

file.exe

IMPHASH 915857a0c1b1198d919ed99e3d150aa9
SHA256 48b4ff898e65dd405ba6df853ab6bab8bb9a30a2aa5f06ed3782d92194791a71
MD5 40852cf253e70e0a5024e429af3178ad
SHA1 8a69fb88a4f56003c212a26f55f6114c17c19233
SHA512 0a15c5acb587b7a393dbf5f984dccb124677e2f7d842f720d4d53362afb8eeeabffc6673252ff2c90c0058521e28af769354aea88650bca90a290cd7f62edafa
SSDEEP 3072:YXtyMOFlm5I5tIEPjE3W4hOmlNYu6WCHPcU8i:se6maW4wS6u/Ck
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24366

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleInputEvents GetStringTypeExW GetConsoleTitleW CreateFileW Module32FirstW GetConsoleAliasW SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExW ZombifyActCtx GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage GetHandleInformation FindNextFileA CompareStringA LoadLibraryW CreateNamedPipeA GlobalFlags GetModuleHandleA CopyFileW CreateActCtxA lstrlenA TlsAlloc CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW CreateMailslotW WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsA FindFirstFileW FreeEnvironmentStringsW VerifyVersionInfoW GlobalAlloc GetTickCount SetLastError GetLastError CreateFileA UnhandledExceptionFilter LoadLibraryA SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetCursorInfo

gdi32

GetBrushOrgEx

Sharing