file[.]exe | Triage™

General

Target
file.exe
Size 299KB
Sample230203-rcplesbb5s
SHA256 134ab8a05fd71a6762287cef0ee99a8ca08c076ffcc23ad44c32fe4f537f6c7d
MD5 ac8b7d8ee7fabfd7f31551facb4e214d
SHA1 0cb5f79a14b1c1c991bc0f34503b1a0e2873a6f0
SHA512 75bafe9c9df873c75114aa39d4e61663885d3faa65c9400cd093f48a1342424d0851e18b036484eb82bba72bbf163779395b3e4e4310c7c27110d8ee16683b72
SSDEEP 6144:/e92NLAvpoxuImqNRDAtSQuG8gJEVq6rZSOKU+XiTrLQq:/e92NwoQqNREtHQgWBZSOKUMiTv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 299KB

file.exe

IMPHASH 9cc63e51c7384890862677f7b0b2380d
SHA256 134ab8a05fd71a6762287cef0ee99a8ca08c076ffcc23ad44c32fe4f537f6c7d
MD5 ac8b7d8ee7fabfd7f31551facb4e214d
SHA1 0cb5f79a14b1c1c991bc0f34503b1a0e2873a6f0
SHA512 75bafe9c9df873c75114aa39d4e61663885d3faa65c9400cd093f48a1342424d0851e18b036484eb82bba72bbf163779395b3e4e4310c7c27110d8ee16683b72
SSDEEP 6144:/e92NLAvpoxuImqNRDAtSQuG8gJEVq6rZSOKU+XiTrLQq:/e92NwoQqNREtHQgWBZSOKUMiTv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30304

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA ReadFile AddAtomA CreateFileW FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW LocalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA ExpandEnvironmentStringsW FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetConsoleAliasA TerminateThread GlobalFlags GetConsoleAliasesLengthW DeleteVolumeMountPointA GetVolumePathNameA SetVolumeMountPointW DeleteTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleWindowInfo CopyFileA DosDateTimeToFileTime GetSystemWindowsDirectoryA EnumResourceLanguagesW LoadModule GetOverlappedResult QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW FoldStringA WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoA FindNextFileW GetConsoleAliasW SetLastError FreeLibrary TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA DeleteFileA

user32

GetComboBoxInfo

Sharing