file[.]exe | Triage™

General

Target
file.exe
Size 328KB
Sample230120-2pdpssaa59
SHA256 0f45b6ffef2caa4bf81e813baa4a22b331504c09a697822d3354ee1545f939ab
MD5 c3084028c39cafa2c49e1dd340c592c0
SHA1 9c2b00678e8f30b095997176f6dc77d0f8025e87
SHA512 ca504bf09faf6d8e8952cf9986a507b7ea235d8cd92c182c1cbe86d5704ac3570f0185518a93be0a6f6e8ff6df23db1401b4390a8388c7d3990a5dcb5db373ad
SSDEEP 6144:tLNHtFKiNQbQ515nJTnqLgCoZsBDfwWNOHH:tZHSCQbabnJ6g6DfwWc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 328KB

file.exe

IMPHASH f59055ddf5d9b2bfdec5b43ba63509a2
SHA256 0f45b6ffef2caa4bf81e813baa4a22b331504c09a697822d3354ee1545f939ab
MD5 c3084028c39cafa2c49e1dd340c592c0
SHA1 9c2b00678e8f30b095997176f6dc77d0f8025e87
SHA512 ca504bf09faf6d8e8952cf9986a507b7ea235d8cd92c182c1cbe86d5704ac3570f0185518a93be0a6f6e8ff6df23db1401b4390a8388c7d3990a5dcb5db373ad
SSDEEP 6144:tLNHtFKiNQbQ515nJTnqLgCoZsBDfwWNOHH:tZHSCQbabnJ6g6DfwWc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20204

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerSetConditionMask GetCurrentProcess FlushConsoleInputBuffer GetModuleHandleW ReadConsoleW GetWindowsDirectoryA GetGeoInfoW GetConsoleAliasExesW FindResourceExA LoadLibraryW GetNamedPipeInfo GetConsoleAliasW GetDevicePowerState LCMapStringA DeleteFiber GetLastError lstrcmpiA InterlockedIncrement VirtualAlloc HeapSize LoadLibraryA OpenWaitableTimerW LocalAlloc DnsHostnameToComputerNameA AddAtomW CreateEventW SetCommMask FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetConsoleCursorInfo EndUpdateResourceA CreateWaitableTimerA EnumCalendarInfoExA LCMapStringW IsBadStringPtrW lstrlenA GetProcAddress SetPriorityClass InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree HeapAlloc TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW GetModuleHandleA

user32

WindowFromDC GetCaretPos

gdi32

GetCharWidthA

advapi32

BackupEventLogW

Sharing