file[.]exe | Triage™

General

Target
file.exe
Size 298KB
Sample230204-f8aatscf63
SHA256 7bccfe9c03119443d84f9298d0af6553ae3746ee3a7dfdedee5f33ca9e2f012a
MD5 c5b51a588ffa8f0f6b7c48d4b99bdaf9
SHA1 57f6b09163d756a19e4a1e92edeac1858e1d18e9
SHA512 83dd7ee5fd76224a22ebef36700271b780fcd8a33196e84a13dc3e053b570876cf9147f50675796cf7641ec2472d993c9c5a92392fb2302853da1a83963f1c14
SSDEEP 6144:PV1L0mAoAb+sbLkAYC5D7T3fT/fTtJE1Ya/PoY:PV1PAoW+svD5XLf9JIYa/QY
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 298KB

file.exe

IMPHASH 99cebe82e9a09163c3069dbc31af6f1e
SHA256 7bccfe9c03119443d84f9298d0af6553ae3746ee3a7dfdedee5f33ca9e2f012a
MD5 c5b51a588ffa8f0f6b7c48d4b99bdaf9
SHA1 57f6b09163d756a19e4a1e92edeac1858e1d18e9
SHA512 83dd7ee5fd76224a22ebef36700271b780fcd8a33196e84a13dc3e053b570876cf9147f50675796cf7641ec2472d993c9c5a92392fb2302853da1a83963f1c14
SSDEEP 6144:PV1L0mAoAb+sbLkAYC5D7T3fT/fTtJE1Ya/PoY:PV1PAoW+svD5XLf9JIYa/QY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA ReadFile AddAtomA CreateFileA FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExW GetTempPathA GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA ExpandEnvironmentStringsA FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetComputerNameExA GetConsoleAliasA TerminateThread GlobalFlags GetConsoleAliasesLengthW GetVolumePathNameA SetVolumeMountPointW DeleteTimerQueueTimer GetLocaleInfoA GetComputerNameA SetConsoleWindowInfo CopyFileA DosDateTimeToFileTime EnumResourceLanguagesW LoadModule GetOverlappedResult QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW FoldStringW WritePrivateProfileStringA GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoA FindNextFileW GetConsoleAliasW SetLastError SetMailslotInfo FreeLibrary TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Sharing