file[.]exe | Triage™

General

Target
file.exe
Size 210KB
Sample230116-e5dcmsdb8w
SHA256 8df105affac7a3c0348efdb7c5f1f159acceda0c13d5f318e611e5528e82d874
MD5 92bb8675d4eedd4d50603597ce85dbbf
SHA1 618f820d738a192c3e70875b01a612df48c03698
SHA512 22ef20a9f4110f5718dacbc81f75dd94c96756b60b34c9d4058d78e68b58d0e4ce7bfb717b996ff26eb1c8dcabd30dbe3a641491a4c57f74a1ce89a9a2e4c564
SSDEEP 3072:1MXWFheF3d56wEZf+iV9uAw7Xw3c249xSqQNqi:1InFapZfMAb3Fh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 210KB

file.exe

IMPHASH 0f2c785ca8bc5088ca1685c62509469d
SHA256 8df105affac7a3c0348efdb7c5f1f159acceda0c13d5f318e611e5528e82d874
MD5 92bb8675d4eedd4d50603597ce85dbbf
SHA1 618f820d738a192c3e70875b01a612df48c03698
SHA512 22ef20a9f4110f5718dacbc81f75dd94c96756b60b34c9d4058d78e68b58d0e4ce7bfb717b996ff26eb1c8dcabd30dbe3a641491a4c57f74a1ce89a9a2e4c564
SSDEEP 3072:1MXWFheF3d56wEZf+iV9uAw7Xw3c249xSqQNqi:1InFapZfMAb3Fh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23742

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeExA GetConsoleTitleW CreateFileW _hwrite GetConsoleAliasA SetComputerNameA GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExA ZombifyActCtx GetLogicalDriveStringsA ReadConsoleInputA GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringW GetProcAddress LocalAlloc GetBinaryTypeA IsDebuggerPresent GetHandleInformation FindNextFileA GetNumberOfConsoleInputEvents LoadLibraryW CreateNamedPipeW GlobalFlags GetModuleHandleA CopyFileW lstrlenA TlsAlloc CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW CreateMailslotW WriteConsoleInputW InterlockedExchangeAdd EnumTimeFormatsW FindFirstFileA FreeEnvironmentStringsW VerifyVersionInfoW GlobalAlloc GetTickCount SetLastError GetLastError CreateFileA CompareStringA UnhandledExceptionFilter LoadLibraryA SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetModuleHandleW TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetCursorInfo

gdi32

GetBrushOrgEx GetCharWidth32A

Sharing