file[.]exe | Triage™

General

Target
file.exe
Size 334KB
Sample230120-yd4kashf23
SHA256 c9f29b092db7587b1cc1324c6b9232a261cb7cabdf614f46a8f05de3eb07358d
MD5 55e9152c2340b3e4aa1a01288274025b
SHA1 d594174ec0ab0ff008f2df706b9b3ac89780d61f
SHA512 74997b1a6983755c79cffcc982b699d09e7f58cb83b1abd1767f43cf640132e97e0059fdd9ed2cccf0de5bddd331c3adb2486de85b3c826eade7bf47d349b485
SSDEEP 3072:MQhUv3LNK3ZcQ5+yUXGl0bfmK7GiiIgI4l0uYwuQLw3ZAgBUDkCQ2Eg9BSpx2xa1:4Lo3ayIbfVJkY6MygCoZsBzRNOD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 334KB

file.exe

IMPHASH 0b393356443baf4ee46c796661de1099
SHA256 c9f29b092db7587b1cc1324c6b9232a261cb7cabdf614f46a8f05de3eb07358d
MD5 55e9152c2340b3e4aa1a01288274025b
SHA1 d594174ec0ab0ff008f2df706b9b3ac89780d61f
SHA512 74997b1a6983755c79cffcc982b699d09e7f58cb83b1abd1767f43cf640132e97e0059fdd9ed2cccf0de5bddd331c3adb2486de85b3c826eade7bf47d349b485
SSDEEP 3072:MQhUv3LNK3ZcQ5+yUXGl0bfmK7GiiIgI4l0uYwuQLw3ZAgBUDkCQ2Eg9BSpx2xa1:4Lo3ayIbfVJkY6MygCoZsBzRNOD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20252

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetPriorityClass IsBadStringPtrW lstrlenA PeekNamedPipe FindResourceExW InterlockedIncrement VerSetConditionMask GetCurrentProcess FlushConsoleInputBuffer FreeEnvironmentStringsA EnumCalendarInfoExW ReadConsoleW GetWindowsDirectoryA GetGeoInfoW GetConsoleAliasExesW FindResourceExA LoadLibraryW GetConsoleAliasW GetDevicePowerState LCMapStringA DeleteFiber GetLastError lstrcmpiA GetProcAddress VirtualAlloc HeapSize BuildCommDCBW OpenWaitableTimerA LoadLibraryA LocalAlloc DnsHostnameToComputerNameA AddAtomW CreateEventW SetCommMask GetModuleHandleA CreateWaitableTimerW VirtualProtect GetConsoleCursorInfo EndUpdateResourceA LCMapStringW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree HeapAlloc TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW

user32

WindowFromDC GetCaretPos

Sharing