file[.]exe | Triage™

General

Target
file.exe
Size 298KB
Sample230204-rs1cvsgh5s
SHA256 8e504b23e591de2e63cb5da50be2ac23bc761cee7c5cf482db4b51abdba99b70
MD5 8ab33151e80b4ad72c40b7648434c133
SHA1 8de0556537068cc2b76800d40a23d5cc7659ba97
SHA512 ed93639d4e404e9e86c9eae7962a671187ebd3a431e67e8e077a432aa8738ed74f7973cdf5e1b17a0ea9bf30e18e3c7bdcf3691d28e9112ed4c2935bfa8ed6ff
SSDEEP 3072:kiprcj7uPLOzYw4WbZ5GPw8nvudyq7JMCj7tR7yzWRADX6slNJZOIVHHV3lZEWe:kiptLkh4nPln2dF2Cj7tISGBTZ9dEWe
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 298KB

file.exe

IMPHASH be7581a01c1ad2f53e81adb31665eb55
SHA256 8e504b23e591de2e63cb5da50be2ac23bc761cee7c5cf482db4b51abdba99b70
MD5 8ab33151e80b4ad72c40b7648434c133
SHA1 8de0556537068cc2b76800d40a23d5cc7659ba97
SHA512 ed93639d4e404e9e86c9eae7962a671187ebd3a431e67e8e077a432aa8738ed74f7973cdf5e1b17a0ea9bf30e18e3c7bdcf3691d28e9112ed4c2935bfa8ed6ff
SSDEEP 3072:kiprcj7uPLOzYw4WbZ5GPw8nvudyq7JMCj7tR7yzWRADX6slNJZOIVHHV3lZEWe:kiptLkh4nPln2dF2Cj7tISGBTZ9dEWe
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30288

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency AddAtomA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetSystemWindowsDirectoryA WriteFile FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA FreeUserPhysicalPages GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetConsoleAliasA TerminateThread GlobalFlags GetConsoleAliasesLengthA GetVolumePathNameA SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameW SetConsoleWindowInfo DosDateTimeToFileTime EnumResourceLanguagesW LoadModule _hwrite QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Resubmissions

Sharing