file[.]exe | Triage™

General

Target
file.exe
Size 191KB
Sample230204-ndpe9sdb53
SHA256 15c5a8dd841448d96c145d60b0d292cdab780480e966afaac7bde09edc8d05d1
MD5 9da1b25f025805f2c63452ab01c5f2f9
SHA1 3c4b6f47efc45a9b72d6958a81ac0a1f0ed83645
SHA512 7704114e93eb14efb3a6b2f40736ea1220d5f311efe8bbb4989078171106cdff67cb5402bf70ed5ea26b7888b1e5c6e87e4fcaa556e39439886ee0ab82a2f9bd
SSDEEP 3072:9fryK7xh4QLjylMPWBX5mwtDf+Zv2nhnTzPaPdewJqBorPc9hmT6c:9fdL2WPtmk2nh3yPdZeorPaUT6
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 191KB

file.exe

IMPHASH aea30aa8311fa7a3ea56995ee020184d
SHA256 15c5a8dd841448d96c145d60b0d292cdab780480e966afaac7bde09edc8d05d1
MD5 9da1b25f025805f2c63452ab01c5f2f9
SHA1 3c4b6f47efc45a9b72d6958a81ac0a1f0ed83645
SHA512 7704114e93eb14efb3a6b2f40736ea1220d5f311efe8bbb4989078171106cdff67cb5402bf70ed5ea26b7888b1e5c6e87e4fcaa556e39439886ee0ab82a2f9bd
SSDEEP 3072:9fryK7xh4QLjylMPWBX5mwtDf+Zv2nhnTzPaPdewJqBorPc9hmT6c:9fdL2WPtmk2nh3yPdZeorPaUT6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30128

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA RequestWakeupLatency AddAtomA CreateFileA FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryA WriteFile FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExW FreeUserPhysicalPages GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetComputerNameExA GetConsoleAliasA TerminateThread GlobalFlags GetConsoleAliasesLengthW GetVolumePathNameA SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameW SetConsoleWindowInfo DosDateTimeToFileTime EnumResourceLanguagesW LoadModule GetOverlappedResult QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoA FindNextFileW GetConsoleAliasW SetLastError FreeLibrary TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Sharing