file[.]exe | Triage™

General

Target
file.exe
Size 330KB
Sample230120-yd4kasbe2z
SHA256 82ab7f1305c2e270b5214f4adcffb23641f5e9f8a538ec150184e4e44de0d457
MD5 91eae0bf82378613b7911bae916937d6
SHA1 a2c833440fc5f94f09c367ccfb6438bec32bff83
SHA512 b75efff12cb4ada220d78a3b7569763470b001a3bb6d020bd66151bef2ce583c0be825af6945be10af7bccb62dab94762dc135426a75684f763108497c8f3132
SSDEEP 3072:c5NbLtK3IcQ5+iS0IWXBTd2rqeQXUyGgwwX8V4ZAgBUDkCQ2Eg9BSpx2JnIArzVU:WLI3bB0xXzby/gCoZsBTnvNOD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 330KB

file.exe

IMPHASH 0b393356443baf4ee46c796661de1099
SHA256 82ab7f1305c2e270b5214f4adcffb23641f5e9f8a538ec150184e4e44de0d457
MD5 91eae0bf82378613b7911bae916937d6
SHA1 a2c833440fc5f94f09c367ccfb6438bec32bff83
SHA512 b75efff12cb4ada220d78a3b7569763470b001a3bb6d020bd66151bef2ce583c0be825af6945be10af7bccb62dab94762dc135426a75684f763108497c8f3132
SSDEEP 3072:c5NbLtK3IcQ5+iS0IWXBTd2rqeQXUyGgwwX8V4ZAgBUDkCQ2Eg9BSpx2JnIArzVU:WLI3bB0xXzby/gCoZsBTnvNOD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20252

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetPriorityClass IsBadStringPtrW lstrlenA PeekNamedPipe FindResourceExW InterlockedIncrement VerSetConditionMask GetCurrentProcess FlushConsoleInputBuffer FreeEnvironmentStringsA EnumCalendarInfoExW ReadConsoleW GetWindowsDirectoryA GetGeoInfoW GetConsoleAliasExesW FindResourceExA LoadLibraryW GetConsoleAliasW GetDevicePowerState LCMapStringA DeleteFiber GetLastError lstrcmpiA GetProcAddress VirtualAlloc HeapSize BuildCommDCBW OpenWaitableTimerA LoadLibraryA LocalAlloc DnsHostnameToComputerNameA AddAtomW CreateEventW SetCommMask GetModuleHandleA CreateWaitableTimerW VirtualProtect GetConsoleCursorInfo EndUpdateResourceA LCMapStringW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree HeapAlloc TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW

user32

WindowFromDC GetCaretPos

Sharing