file[.]exe | Triage™

General

Target
file.exe
Size 332KB
Sample230121-ag6xtsca5x
SHA256 4e0f0ea902f9f9abc12a07faff5f5f84e54f8ed2adf8d25e40936e8c521fd3c2
MD5 b530ef56f2930f7c937aa15668ff9179
SHA1 441923675709a27e64143768949efc9f96a4dc9c
SHA512 1ced22b0631db8d435fd9b81eba769f8c7bdf23393188b9a1287e7997bc7d5debd7acb5f6093f06e5a65f927f0093e1a774bad2a002207b7e8ecba6fc40c105d
SSDEEP 6144:P6LrxX8xBoCXDrURRGFS/fmwgCoZsBW473Ox:ifxX8z1D45g6ny
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 332KB

file.exe

IMPHASH d076a9214266582dfc3eb3a1405013bf
SHA256 4e0f0ea902f9f9abc12a07faff5f5f84e54f8ed2adf8d25e40936e8c521fd3c2
MD5 b530ef56f2930f7c937aa15668ff9179
SHA1 441923675709a27e64143768949efc9f96a4dc9c
SHA512 1ced22b0631db8d435fd9b81eba769f8c7bdf23393188b9a1287e7997bc7d5debd7acb5f6093f06e5a65f927f0093e1a774bad2a002207b7e8ecba6fc40c105d
SSDEEP 6144:P6LrxX8xBoCXDrURRGFS/fmwgCoZsBW473Ox:ifxX8z1D45g6ny
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19932

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerSetConditionMask GetCurrentProcess FlushConsoleInputBuffer GetModuleHandleW ReadConsoleW GetWindowsDirectoryA GetGeoInfoW GetConsoleAliasExesW FindResourceExA LoadLibraryW GetNamedPipeInfo GetConsoleAliasW GetDevicePowerState LCMapStringA DeleteFiber SetLastError lstrcmpiA InterlockedIncrement VirtualAlloc HeapSize LoadLibraryA OpenWaitableTimerW LocalAlloc DnsHostnameToComputerNameA AddAtomW CreateEventW SetCommMask FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetConsoleCursorInfo EndUpdateResourceA CreateWaitableTimerA EnumCalendarInfoExA LCMapStringW IsBadStringPtrW lstrlenA GetProcAddress SetPriorityClass InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapCreate VirtualFree HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW GetModuleHandleA

user32

WindowFromDC GetCaretPos

gdi32

GetCharWidthA

advapi32

BackupEventLogW

Sharing