file[.]exe | Triage™

General

Target
file.exe
Size 328KB
Sample230120-3tenbsab49
SHA256 82985ea72b32a94d2b854237a12eda5cc44fbfcd0c61bd651a4d7fe7917ba49a
MD5 1ea135a7cfce2b5cbf40322f31ab2576
SHA1 408bad4bf263581ea9859dc34c6daf4573106062
SHA512 fc47323239c305cffaee786610eec037a9786d04b569dd4f674c6d7759f26e74904aa4d341f8cf56862c41287ba8e653ffc69c98ce00214a957f6ed907d82c63
SSDEEP 6144:HsLXis2CuolmCLzBw2RacgCoZsBPH4OxT:MbisPNZRvg6/7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 328KB

file.exe

IMPHASH d076a9214266582dfc3eb3a1405013bf
SHA256 82985ea72b32a94d2b854237a12eda5cc44fbfcd0c61bd651a4d7fe7917ba49a
MD5 1ea135a7cfce2b5cbf40322f31ab2576
SHA1 408bad4bf263581ea9859dc34c6daf4573106062
SHA512 fc47323239c305cffaee786610eec037a9786d04b569dd4f674c6d7759f26e74904aa4d341f8cf56862c41287ba8e653ffc69c98ce00214a957f6ed907d82c63
SSDEEP 6144:HsLXis2CuolmCLzBw2RacgCoZsBPH4OxT:MbisPNZRvg6/7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19916

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerSetConditionMask GetCurrentProcess FlushConsoleInputBuffer GetModuleHandleW ReadConsoleW GetWindowsDirectoryA GetGeoInfoW GetConsoleAliasExesW FindResourceExA LoadLibraryW GetNamedPipeInfo GetConsoleAliasW GetDevicePowerState LCMapStringA DeleteFiber SetLastError lstrcmpiA InterlockedIncrement VirtualAlloc HeapSize LoadLibraryA OpenWaitableTimerW LocalAlloc DnsHostnameToComputerNameA AddAtomW CreateEventW SetCommMask FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetConsoleCursorInfo EndUpdateResourceA CreateWaitableTimerA EnumCalendarInfoExA LCMapStringW IsBadStringPtrW lstrlenA GetProcAddress SetPriorityClass InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapCreate VirtualFree HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW GetModuleHandleA

user32

WindowFromDC GetCaretPos

gdi32

GetCharWidthA

advapi32

BackupEventLogW

Sharing