file[.]exe | Triage™

General

Target
file.exe
Size 211KB
Sample230117-gs6vjabb83
SHA256 89e37cee579ce2d16a64ab1528f1e3340dfdd91cba9c443f93fcd720aa179104
MD5 4446f327450c6c9ff7cc1ffff843a7b1
SHA1 15265d2e107b0955719a952215259229b664f585
SHA512 d84fcdc7fc51a5682d71f6178745168ada03060bbfbaad30630ea0e6427addab639384ad3acb56ede705682b9ef8fc9f16c1bcd426cbc6bb4e8c043ca4d2fe7c
SSDEEP 3072:tXZsZMgrk5ykJ41f9DPNwM1rvqcHYn0flowDTKq29T2vOF1Q:p8rrkIDp1r/i2/DM9T2v2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 211KB

file.exe

IMPHASH 831efd74b04212c71384962d1e3b11ac
SHA256 89e37cee579ce2d16a64ab1528f1e3340dfdd91cba9c443f93fcd720aa179104
MD5 4446f327450c6c9ff7cc1ffff843a7b1
SHA1 15265d2e107b0955719a952215259229b664f585
SHA512 d84fcdc7fc51a5682d71f6178745168ada03060bbfbaad30630ea0e6427addab639384ad3acb56ede705682b9ef8fc9f16c1bcd426cbc6bb4e8c043ca4d2fe7c
SSDEEP 3072:tXZsZMgrk5ykJ41f9DPNwM1rvqcHYn0flowDTKq29T2vOF1Q:p8rrkIDp1r/i2/DM9T2v2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23822

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessPriorityBoost GetConsoleAliasA CreateFileA GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExA ZombifyActCtx GetLogicalDriveStringsA ReadConsoleInputA GetComputerNameExW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringW GetProcAddress LocalAlloc GetBinaryTypeA IsDebuggerPresent FindActCtxSectionStringW UnhandledExceptionFilter LocalFlags LoadLibraryW CreateFileW GlobalFlags GetModuleHandleA CopyFileW CreateActCtxW lstrlenA TlsAlloc CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW CreateMailslotW WriteConsoleInputW InterlockedExchangeAdd EnumTimeFormatsW FindFirstFileA FreeEnvironmentStringsW VerifyVersionInfoW GlobalAlloc GetTickCount GetLastError SetStdHandle GetConsoleTitleW GetNumberOfConsoleInputEvents CreateNamedPipeW LoadLibraryA SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetModuleHandleW TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageExtraInfo GetMenuInfo

gdi32

GetBrushOrgEx GetColorAdjustment GetCharWidth32A

Sharing