file[.]exe | Triage™

General

Target
file.exe
Size 388KB
Sample230204-kz1tmsgc5s
SHA256 085ff00dc3171b24aa36b377bbdf4d3c6ca8a159b69e680180605a02c104affe
MD5 d59ec9541a7f99658d524628d4c19afa
SHA1 73aeaf167ef3077648e8bab049a374f4c9917422
SHA512 2cfb1bdc75557c23894811bb7c059cd7251cc19762d53142dede9e4e12ba701fd460559ad26e6adf1c221d4fe3f683e8cdce788bc33d51fbd2205fbd1c56bd50
SSDEEP 6144:2m79ZLpUdhFzOECfuik0ZO1didr13753bqQ6hX:2mDidhYJGioUdr13dcX
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 388KB

file.exe

IMPHASH 99cebe82e9a09163c3069dbc31af6f1e
SHA256 085ff00dc3171b24aa36b377bbdf4d3c6ca8a159b69e680180605a02c104affe
MD5 d59ec9541a7f99658d524628d4c19afa
SHA1 73aeaf167ef3077648e8bab049a374f4c9917422
SHA512 2cfb1bdc75557c23894811bb7c059cd7251cc19762d53142dede9e4e12ba701fd460559ad26e6adf1c221d4fe3f683e8cdce788bc33d51fbd2205fbd1c56bd50
SSDEEP 6144:2m79ZLpUdhFzOECfuik0ZO1didr13753bqQ6hX:2mDidhYJGioUdr13dcX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30240

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA ReadFile AddAtomA CreateFileA FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExW GetTempPathA GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA ExpandEnvironmentStringsA FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetComputerNameExA GetConsoleAliasA TerminateThread GlobalFlags GetConsoleAliasesLengthW GetVolumePathNameA SetVolumeMountPointW DeleteTimerQueueTimer GetLocaleInfoA GetComputerNameA SetConsoleWindowInfo CopyFileA DosDateTimeToFileTime EnumResourceLanguagesW LoadModule GetOverlappedResult QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW FoldStringW WritePrivateProfileStringA GetUserDefaultLangID SetConsoleDisplayMode WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoA FindNextFileW GetConsoleAliasW SetLastError SetMailslotInfo FreeLibrary TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Sharing