file[.]exe | Triage™

General

Target
file.exe
Size 294KB
Sample230131-p8metsac51
SHA256 09d5443877e9b4d3152509801503065854eaaf49fbb492ab29cc94973bb3109d
MD5 c145ad28e78d37544f6e4f60ba20a5d4
SHA1 d27991ec88ee934dbfa0f81f9f394f52a2dc9c8b
SHA512 f1ad96f77e036c59e3288fadc26e8564b941714383b7bb9a768f4573289635e3e671ef60db1dab389d912ff3cc501895fec3249fbfe126383577ceee3a987645
SSDEEP 3072:sauvM7CLCLRo2sw5TXUX8he5UmGMNqsUOZM7Gx7f43H7BF6/85RCqx:8k7CLCi2swljhe5UpiZ1x7f4Vc/87
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 294KB

file.exe

IMPHASH 78339dc1c5de0e493ea2b28607ce356e
SHA256 09d5443877e9b4d3152509801503065854eaaf49fbb492ab29cc94973bb3109d
MD5 c145ad28e78d37544f6e4f60ba20a5d4
SHA1 d27991ec88ee934dbfa0f81f9f394f52a2dc9c8b
SHA512 f1ad96f77e036c59e3288fadc26e8564b941714383b7bb9a768f4573289635e3e671ef60db1dab389d912ff3cc501895fec3249fbfe126383577ceee3a987645
SSDEEP 3072:sauvM7CLCLRo2sw5TXUX8he5UmGMNqsUOZM7Gx7f43H7BF6/85RCqx:8k7CLCi2swljhe5UpiZ1x7f4Vc/87
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17344

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW InterlockedIncrement GetCurrentProcess SetHandleInformation GetGeoInfoW GetConsoleAliasExesW GetDateFormatA SetProcessPriorityBoost FindResourceExA GlobalAlloc LoadLibraryW DnsHostnameToComputerNameW WriteConsoleW EnumResourceLanguagesA LCMapStringA GetConsoleAliasesW GetLastError SetLastError GetProcAddress VirtualAlloc HeapSize EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize AddAtomW GetCommMask SetCommMask FoldStringA GetModuleHandleA CancelTimerQueueTimer BuildCommDCBA GetCPInfoExA SetCalendarInfoA EndUpdateResourceA TerminateJobObject GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement TerminateProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW RaiseException

user32

GetListBoxInfo DdeQueryStringA LoadMenuW

Sharing