file[.]exe | Triage™

General

Target
file.exe
Size 210KB
Sample230117-krk38adc29
SHA256 45bb069a3ebb02281ce014ef985f3c31f1186c086d331adbe3f07950aaa5ed8f
MD5 0209b142f4b3882ca3cee2f5c2cd7145
SHA1 d159e0316e7f8622b2b512daffeb42c292639cff
SHA512 1ca021a23746854483e2d1d236e622bb9f8f54c55b4fedf661e0230e72c95cb3826c79c2b9dc3aa42e64e7951ad6d93bd3c5b1d63cdf5df7aa50030c406a25b5
SSDEEP 3072:aXm6QqrDV5ZhkYd8w4cgsoyrxrSL/UIZno2lHtNBUjuXMPj9T2vOF1Q:6rfkxggNQxrG/Uon9GqXM79T2v2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 210KB

file.exe

IMPHASH 831efd74b04212c71384962d1e3b11ac
SHA256 45bb069a3ebb02281ce014ef985f3c31f1186c086d331adbe3f07950aaa5ed8f
MD5 0209b142f4b3882ca3cee2f5c2cd7145
SHA1 d159e0316e7f8622b2b512daffeb42c292639cff
SHA512 1ca021a23746854483e2d1d236e622bb9f8f54c55b4fedf661e0230e72c95cb3826c79c2b9dc3aa42e64e7951ad6d93bd3c5b1d63cdf5df7aa50030c406a25b5
SSDEEP 3072:aXm6QqrDV5ZhkYd8w4cgsoyrxrSL/UIZno2lHtNBUjuXMPj9T2vOF1Q:6rfkxggNQxrG/Uon9GqXM79T2v2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23822

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessPriorityBoost GetConsoleAliasA CreateFileA GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExA ZombifyActCtx GetLogicalDriveStringsA ReadConsoleInputA GetComputerNameExW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringW GetProcAddress LocalAlloc GetBinaryTypeA IsDebuggerPresent FindActCtxSectionStringW UnhandledExceptionFilter LocalFlags LoadLibraryW CreateFileW GlobalFlags GetModuleHandleA CopyFileW CreateActCtxW lstrlenA TlsAlloc CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW CreateMailslotW WriteConsoleInputW InterlockedExchangeAdd EnumTimeFormatsW FindFirstFileA FreeEnvironmentStringsW VerifyVersionInfoW GlobalAlloc GetTickCount GetLastError SetStdHandle GetConsoleTitleW GetNumberOfConsoleInputEvents CreateNamedPipeW LoadLibraryA SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetModuleHandleW TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageExtraInfo GetMenuInfo

gdi32

GetBrushOrgEx GetColorAdjustment GetCharWidth32A

Sharing