file[.]exe | Triage™

General

Target
file.exe
Size 192KB
Sample230203-ry5jrsbc7v
SHA256 e2145cb74caf435887344832b31954afd855e60d07cfa5fe2a0bcc4a32b8c363
MD5 9256d4a73e6f2a37e0713aaf3dfcb88d
SHA1 5e60d3ca6d38e008b18cc6ba08014eb0344356ef
SHA512 36ce00d436146223ed76dfc79819fda18fc1be6351e224d3ba1ec75d33d7b97284b0cf00bfcf1842a7d3fcc066f52af266ed9e48d1ee70ad0b0f869e56c9ccf5
SSDEEP 3072:ze7XMAD7vr36JVfKrZLH3R48RWH9R5ZxJPpEtTkJQIXJNNnvq6b5:zej6JlQLXRFRYJsBIXJNFR5
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 192KB

file.exe

IMPHASH 9cc63e51c7384890862677f7b0b2380d
SHA256 e2145cb74caf435887344832b31954afd855e60d07cfa5fe2a0bcc4a32b8c363
MD5 9256d4a73e6f2a37e0713aaf3dfcb88d
SHA1 5e60d3ca6d38e008b18cc6ba08014eb0344356ef
SHA512 36ce00d436146223ed76dfc79819fda18fc1be6351e224d3ba1ec75d33d7b97284b0cf00bfcf1842a7d3fcc066f52af266ed9e48d1ee70ad0b0f869e56c9ccf5
SSDEEP 3072:ze7XMAD7vr36JVfKrZLH3R48RWH9R5ZxJPpEtTkJQIXJNNnvq6b5:zej6JlQLXRFRYJsBIXJNFR5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30304

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA ReadFile AddAtomA CreateFileW FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW LocalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA ExpandEnvironmentStringsW FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetConsoleAliasA TerminateThread GlobalFlags GetConsoleAliasesLengthW DeleteVolumeMountPointA GetVolumePathNameA SetVolumeMountPointW DeleteTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleWindowInfo CopyFileA DosDateTimeToFileTime GetSystemWindowsDirectoryA EnumResourceLanguagesW LoadModule GetOverlappedResult QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW FoldStringA WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoA FindNextFileW GetConsoleAliasW SetLastError FreeLibrary TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA DeleteFileA

user32

GetComboBoxInfo

Sharing