file[.]exe | Triage™

General

Target
file.exe
Size 391KB
Sample230131-grfxqaeg99
SHA256 6722fb152614081939f525cd45c5f16a129e76dcbc88d644a857d4a4b01c7bcd
MD5 029100b41e75f788e6b6c01441b692c5
SHA1 de7ccc22a64eabb3751bd21b79b4b54ce2fa49b0
SHA512 2b9a3dd9b10a7b4b0f825cb2d321839674598c5cc4a66316bc8c0f9b4d7af8e04bcf3d1545cab6e7c35f7c059975fdc2980382d6fe047ffa436089f242f8c9f3
SSDEEP 6144:jk9QLjmXqvq5sMTWN3Ufx/VueIfqE864+1m7f4V5T8:I6fbI4864+1mzO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 391KB

file.exe

IMPHASH a2c8bd590ac12702f85d4107db46f8f7
SHA256 6722fb152614081939f525cd45c5f16a129e76dcbc88d644a857d4a4b01c7bcd
MD5 029100b41e75f788e6b6c01441b692c5
SHA1 de7ccc22a64eabb3751bd21b79b4b54ce2fa49b0
SHA512 2b9a3dd9b10a7b4b0f825cb2d321839674598c5cc4a66316bc8c0f9b4d7af8e04bcf3d1545cab6e7c35f7c059975fdc2980382d6fe047ffa436089f242f8c9f3
SSDEEP 6144:jk9QLjmXqvq5sMTWN3Ufx/VueIfqE864+1m7f4V5T8:I6fbI4864+1mzO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17296

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetCurrentProcess SetHandleInformation GetWindowsDirectoryA GetGeoInfoW GetConsoleAliasExesW GetDateFormatA SetProcessPriorityBoost FindResourceExA GlobalAlloc DnsHostnameToComputerNameW WriteConsoleW EnumResourceLanguagesA IsBadStringPtrA LCMapStringA GetConsoleAliasesW GetLastError SetLastError GetProcAddress VirtualAlloc HeapSize EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize AddAtomW GetCommMask SetCommMask FoldStringA GetModuleHandleA CancelTimerQueueTimer BuildCommDCBA GetCPInfoExA SetCalendarInfoA EndUpdateResourceA TerminateJobObject GetVolumeNameForVolumeMountPointW LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement TerminateProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW RaiseException

user32

GetListBoxInfo DdeQueryStringA LoadMenuW

Sharing