file[.]exe | Triage™

General

Target
file.exe
Size 194KB
Sample230203-q9vchaff22
SHA256 be943cff3ddc8fddaba89b354a54c6097cc4182be24253bf5edfd06565ad5f90
MD5 1082dc2824b2ee52285f8dab5b4adcd8
SHA1 8e6ec81947e73b447c6ae9e287d827873a74dc24
SHA512 ac7972ca2ade50bc1b0da44d40d815cc347122db408cf47da8aed801fa009f59fbb472511c933873a0844ebd92d51f300fa2e096546b2360cb34442221fa720c
SSDEEP 3072:ae27kNl/aFVs7hLZjZKpuWls584tAe8eUFk4ypmvSmYZWejy7zxx:ae+Fs7hLdZeutedImvSmYZFjkzz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 194KB

file.exe

IMPHASH 9cc63e51c7384890862677f7b0b2380d
SHA256 be943cff3ddc8fddaba89b354a54c6097cc4182be24253bf5edfd06565ad5f90
MD5 1082dc2824b2ee52285f8dab5b4adcd8
SHA1 8e6ec81947e73b447c6ae9e287d827873a74dc24
SHA512 ac7972ca2ade50bc1b0da44d40d815cc347122db408cf47da8aed801fa009f59fbb472511c933873a0844ebd92d51f300fa2e096546b2360cb34442221fa720c
SSDEEP 3072:ae27kNl/aFVs7hLZjZKpuWls584tAe8eUFk4ypmvSmYZWejy7zxx:ae+Fs7hLdZeutedImvSmYZFjkzz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30304

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA ReadFile AddAtomA CreateFileW FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW LocalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA ExpandEnvironmentStringsW FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetConsoleAliasA TerminateThread GlobalFlags GetConsoleAliasesLengthW DeleteVolumeMountPointA GetVolumePathNameA SetVolumeMountPointW DeleteTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleWindowInfo CopyFileA DosDateTimeToFileTime GetSystemWindowsDirectoryA EnumResourceLanguagesW LoadModule GetOverlappedResult QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW FoldStringA WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoA FindNextFileW GetConsoleAliasW SetLastError FreeLibrary TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA DeleteFileA

user32

GetComboBoxInfo

Sharing