file[.]exe | Triage™

General

Target
file.exe
Size 388KB
Sample230204-seflzagh8z
SHA256 a0eb22ecb0d5658c82d19d67df932896149bc9a5156f11e1605612ffd373d516
MD5 afe8f71beee2e5678e9edd11bf33a61b
SHA1 efef6dba6cd8a3dfed3585f955bfb0666ef6df65
SHA512 26233fb56f702b4d997d972f65748b0c0426f14b5204d57c7a0944fae3f4132806e17994de9b27c61eb7282ccbff28a5bf79e6b64f0c86cbf1af7afe290ee4d4
SSDEEP 6144:z8ZTwp5L0yutewDIWaL3q0x74dDmhjn/3HwHVu7LkoeGQRYF:AZTko9tfi3hz/3woA
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 388KB

file.exe

IMPHASH be7581a01c1ad2f53e81adb31665eb55
SHA256 a0eb22ecb0d5658c82d19d67df932896149bc9a5156f11e1605612ffd373d516
MD5 afe8f71beee2e5678e9edd11bf33a61b
SHA1 efef6dba6cd8a3dfed3585f955bfb0666ef6df65
SHA512 26233fb56f702b4d997d972f65748b0c0426f14b5204d57c7a0944fae3f4132806e17994de9b27c61eb7282ccbff28a5bf79e6b64f0c86cbf1af7afe290ee4d4
SSDEEP 6144:z8ZTwp5L0yutewDIWaL3q0x74dDmhjn/3HwHVu7LkoeGQRYF:AZTko9tfi3hz/3woA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30448

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency AddAtomA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetSystemWindowsDirectoryA WriteFile FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA FreeUserPhysicalPages GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetConsoleAliasA TerminateThread GlobalFlags GetConsoleAliasesLengthA GetVolumePathNameA SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameW SetConsoleWindowInfo DosDateTimeToFileTime EnumResourceLanguagesW LoadModule _hwrite QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Sharing