file[.]exe | Triage™

General

Target
file.exe
Size 191KB
Sample230204-pgldfsgf2v
SHA256 6b1240a3b53ac9be8992347c3ff354c5270d756c265c0b9587ba586f837ab889
MD5 113a21345729c63ce7ba40961ddfe9dd
SHA1 ca40914844dd8a52d4b90c8cedc4ef63adb711ae
SHA512 48ff0ae37c3f7404764280fae587cee4376e884ff5fb2554e4d9c0546a78696ef1b94ffd57a71624fbca5c07c14fc77e37acbe626733cda527b2413a759d7e1e
SSDEEP 3072:R6+JJTFGY/xLFk/rL0WhV55IRvi/bCc4W84yXr9O4b79:R6uL/xLW//0UR4W84y79Oo
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 191KB

file.exe

IMPHASH 3a600fd555a59cd5911cb26c6ab55d55
SHA256 6b1240a3b53ac9be8992347c3ff354c5270d756c265c0b9587ba586f837ab889
MD5 113a21345729c63ce7ba40961ddfe9dd
SHA1 ca40914844dd8a52d4b90c8cedc4ef63adb711ae
SHA512 48ff0ae37c3f7404764280fae587cee4376e884ff5fb2554e4d9c0546a78696ef1b94ffd57a71624fbca5c07c14fc77e37acbe626733cda527b2413a759d7e1e
SSDEEP 3072:R6+JJTFGY/xLFk/rL0WhV55IRvi/bCc4W84yXr9O4b79:R6uL/xLW//0UR4W84y79Oo
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30208

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesW RequestWakeupLatency AddAtomA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetSystemWindowsDirectoryA WriteFile FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA FreeUserPhysicalPages GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetConsoleAliasA TerminateThread GlobalFlags GetConsoleAliasesLengthA GetVolumePathNameA SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameW SetConsoleWindowInfo DosDateTimeToFileTime EnumResourceLanguagesW LoadModule _hwrite QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Sharing