file[.]exe | Triage™

General

Target
file.exe
Size 298KB
Sample230204-jw4wfsch29
SHA256 6c031a0f156aa5e291dac746b8df7cdd6caa5fc2f7f273f0d7782ff99c98b45a
MD5 b100b49cda91183607ae3a982b126804
SHA1 050d933f6f061880896620cf5b43a3eb0a294db3
SHA512 22a4c246865caa81c969133b759fa11e238350f2badbe06cb15800e588bac5a495a5c8db4b3f35d747e837cbd8266ea0c2983f4ea95f98844e04be601fe2d583
SSDEEP 6144:KJlzLZpot2TZ0RHqcrAtz0j56xdCARoEWa:KJFXoM2xqc0tz0jEx6Y
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 298KB

file.exe

IMPHASH 99cebe82e9a09163c3069dbc31af6f1e
SHA256 6c031a0f156aa5e291dac746b8df7cdd6caa5fc2f7f273f0d7782ff99c98b45a
MD5 b100b49cda91183607ae3a982b126804
SHA1 050d933f6f061880896620cf5b43a3eb0a294db3
SHA512 22a4c246865caa81c969133b759fa11e238350f2badbe06cb15800e588bac5a495a5c8db4b3f35d747e837cbd8266ea0c2983f4ea95f98844e04be601fe2d583
SSDEEP 6144:KJlzLZpot2TZ0RHqcrAtz0j56xdCARoEWa:KJFXoM2xqc0tz0jEx6Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA ReadFile AddAtomA CreateFileA FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExW GetTempPathA GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA ExpandEnvironmentStringsA FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetComputerNameExA GetConsoleAliasA TerminateThread GlobalFlags GetConsoleAliasesLengthW GetVolumePathNameA SetVolumeMountPointW DeleteTimerQueueTimer GetLocaleInfoA GetComputerNameA SetConsoleWindowInfo CopyFileA DosDateTimeToFileTime EnumResourceLanguagesW LoadModule GetOverlappedResult QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW FoldStringW WritePrivateProfileStringA GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoA FindNextFileW GetConsoleAliasW SetLastError SetMailslotInfo FreeLibrary TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Sharing