file[.]exe | Triage™

General

Target
file.exe
Size 212KB
Sample230117-kep7eaha21
SHA256 38bc17dd168ca94eac97bedc8092d42469f3fc36fdb7130dd33c6439c8afa0b2
MD5 3f4a7e6fefab79b8ddfd89fe20bf7873
SHA1 a9419b4781d0dfa62f57eb8074c0f09c8bd2bf27
SHA512 dca8d608b2850719ca536a454b696d25c7552149dd131ca1ca802feab0cce1ed0f4cb18f2fb228b87054363ced3f7adb4601803a7dc6eb023bebb62dfe462ec1
SSDEEP 3072:xXDYuwP3nc53J8S0WYeFbgtDzy+DVnX4TjvX9T2vOF1Q:Vu3nMOibgtDzy+DVI39T2v2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 212KB

file.exe

IMPHASH 831efd74b04212c71384962d1e3b11ac
SHA256 38bc17dd168ca94eac97bedc8092d42469f3fc36fdb7130dd33c6439c8afa0b2
MD5 3f4a7e6fefab79b8ddfd89fe20bf7873
SHA1 a9419b4781d0dfa62f57eb8074c0f09c8bd2bf27
SHA512 dca8d608b2850719ca536a454b696d25c7552149dd131ca1ca802feab0cce1ed0f4cb18f2fb228b87054363ced3f7adb4601803a7dc6eb023bebb62dfe462ec1
SSDEEP 3072:xXDYuwP3nc53J8S0WYeFbgtDzy+DVnX4TjvX9T2vOF1Q:Vu3nMOibgtDzy+DVI39T2v2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23822

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessPriorityBoost GetConsoleAliasA CreateFileA GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExA ZombifyActCtx GetLogicalDriveStringsA ReadConsoleInputA GetComputerNameExW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringW GetProcAddress LocalAlloc GetBinaryTypeA IsDebuggerPresent FindActCtxSectionStringW UnhandledExceptionFilter LocalFlags LoadLibraryW CreateFileW GlobalFlags GetModuleHandleA CopyFileW CreateActCtxW lstrlenA TlsAlloc CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW CreateMailslotW WriteConsoleInputW InterlockedExchangeAdd EnumTimeFormatsW FindFirstFileA FreeEnvironmentStringsW VerifyVersionInfoW GlobalAlloc GetTickCount GetLastError SetStdHandle GetConsoleTitleW GetNumberOfConsoleInputEvents CreateNamedPipeW LoadLibraryA SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetModuleHandleW TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageExtraInfo GetMenuInfo

gdi32

GetBrushOrgEx GetColorAdjustment GetCharWidth32A

Sharing