file[.]exe | Triage™

General

Target
file.exe
Size 298KB
Sample230204-nmpsdsge4s
SHA256 d433481a5ec4b4445828802f528b19d54f9be76561c1386e0a458a1ccf2e034a
MD5 db7d8fa729fd164ca2a5794341058995
SHA1 dae40301699f4bfec6eb5e673da2d2fc786ce40e
SHA512 94ce5b29dfeaee7b9ce209c8a755b4a0a01284d1a68eabd83fb7ea5a375e69be333401440bb753c3dd747ec32ef802687a9d2d1c09317738685d46b7ce86a2c6
SSDEEP 6144:4bdLWlXX916xfF6NfUp2NjJdyLgEzAsStlmJTmKHY:4bdeXN/Nf0O9dagEsZOp4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 298KB

file.exe

IMPHASH aea30aa8311fa7a3ea56995ee020184d
SHA256 d433481a5ec4b4445828802f528b19d54f9be76561c1386e0a458a1ccf2e034a
MD5 db7d8fa729fd164ca2a5794341058995
SHA1 dae40301699f4bfec6eb5e673da2d2fc786ce40e
SHA512 94ce5b29dfeaee7b9ce209c8a755b4a0a01284d1a68eabd83fb7ea5a375e69be333401440bb753c3dd747ec32ef802687a9d2d1c09317738685d46b7ce86a2c6
SSDEEP 6144:4bdLWlXX916xfF6NfUp2NjJdyLgEzAsStlmJTmKHY:4bdeXN/Nf0O9dagEsZOp4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30144

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesA RequestWakeupLatency AddAtomA CreateFileA FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryA WriteFile FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExW FreeUserPhysicalPages GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetComputerNameExA GetConsoleAliasA TerminateThread GlobalFlags GetConsoleAliasesLengthW GetVolumePathNameA SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameW SetConsoleWindowInfo DosDateTimeToFileTime EnumResourceLanguagesW LoadModule GetOverlappedResult QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoA FindNextFileW GetConsoleAliasW SetLastError FreeLibrary TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Sharing