file[.]exe | Triage™

General

Target
file.exe
Size 296KB
Sample230131-tx3d5aah7z
SHA256 d270c1a6bfe1a4ba4bb170033ff448fa1421a549519250ee892f856fe101985a
MD5 e272a502d081ecc2490ff3ddd70d3379
SHA1 3b3ec8b681fb0432c2e17809e61b60627641bdf1
SHA512 cd00f47de843ca27db4ab99ebff5e19b7f5c0e69119a7a8b85f3d0c57026170ca270dfc39ad32ce34fe19c27b2008434d48d88d43f485ebddfecc6ef73c8eb35
SSDEEP 3072:uqLuLwYaLNVRoOt/NiCDBeE0xj7pcQNU/Zx6GmqPUx6WfQz86mS6N/03MMu:YsYaLNUQFiQeEEmEyxjmqMoIxRs8Mu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 296KB

file.exe

IMPHASH e73db8d7bd9f9f6b2076d026a8fb8fc5
SHA256 d270c1a6bfe1a4ba4bb170033ff448fa1421a549519250ee892f856fe101985a
MD5 e272a502d081ecc2490ff3ddd70d3379
SHA1 3b3ec8b681fb0432c2e17809e61b60627641bdf1
SHA512 cd00f47de843ca27db4ab99ebff5e19b7f5c0e69119a7a8b85f3d0c57026170ca270dfc39ad32ce34fe19c27b2008434d48d88d43f485ebddfecc6ef73c8eb35
SSDEEP 3072:uqLuLwYaLNVRoOt/NiCDBeE0xj7pcQNU/Zx6GmqPUx6WfQz86mS6N/03MMu:YsYaLNUQFiQeEEmEyxjmqMoIxRs8Mu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17376

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA IsBadStringPtrW FindResourceExW InterlockedIncrement GetCurrentProcess SetHandleInformation GetGeoInfoW GetConsoleAliasExesW GetDateFormatA SetProcessPriorityBoost GlobalAlloc LoadLibraryW WriteConsoleW LCMapStringA GetConsoleAliasesW GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc HeapSize EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize DnsHostnameToComputerNameA AddAtomW GetCommMask SetCommMask FoldStringA GetModuleHandleA CancelTimerQueueTimer BuildCommDCBA SetCalendarInfoA EndUpdateResourceA TerminateJobObject GetWindowsDirectoryW EnumResourceLanguagesW LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement TerminateProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW RaiseException

user32

GetListBoxInfo DdeQueryStringA LoadMenuW

Sharing