file[.]exe | Triage™

General

Target
file.exe
Size 391KB
Sample230131-kfvhhsff52
SHA256 a712d5c80ae85810cb593fecae145cbde3616e9272563cddbe3b5ee215f054e1
MD5 a2334decbc20c6a6f33fe2da2600a59e
SHA1 ab1ecaaef56a3b694a55e68abd46e8c954a3b639
SHA512 d7ca21d0110550ca1635e927b83c83b47d257b13031829983dfef9255bbed3efb0cf14dd659461e155aff4c5419161c3f7e5982232b8ce9db92d6f00b66da8d4
SSDEEP 6144:7/MILImjdRmq1NIwel7Cxtu92036Z+m7f4VE5Tj:DbcumYIbCxtuX6MmzOu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 391KB

file.exe

IMPHASH a2c8bd590ac12702f85d4107db46f8f7
SHA256 a712d5c80ae85810cb593fecae145cbde3616e9272563cddbe3b5ee215f054e1
MD5 a2334decbc20c6a6f33fe2da2600a59e
SHA1 ab1ecaaef56a3b694a55e68abd46e8c954a3b639
SHA512 d7ca21d0110550ca1635e927b83c83b47d257b13031829983dfef9255bbed3efb0cf14dd659461e155aff4c5419161c3f7e5982232b8ce9db92d6f00b66da8d4
SSDEEP 6144:7/MILImjdRmq1NIwel7Cxtu92036Z+m7f4VE5Tj:DbcumYIbCxtuX6MmzOu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17296

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetCurrentProcess SetHandleInformation GetWindowsDirectoryA GetGeoInfoW GetConsoleAliasExesW GetDateFormatA SetProcessPriorityBoost FindResourceExA GlobalAlloc DnsHostnameToComputerNameW WriteConsoleW EnumResourceLanguagesA IsBadStringPtrA LCMapStringA GetConsoleAliasesW GetLastError SetLastError GetProcAddress VirtualAlloc HeapSize EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize AddAtomW GetCommMask SetCommMask FoldStringA GetModuleHandleA CancelTimerQueueTimer BuildCommDCBA GetCPInfoExA SetCalendarInfoA EndUpdateResourceA TerminateJobObject GetVolumeNameForVolumeMountPointW LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement TerminateProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW RaiseException

user32

GetListBoxInfo DdeQueryStringA LoadMenuW

Sharing