file[.]exe | Triage™

General

Target
file.exe
Size 193KB
Sample230204-xe7gxahe3x
SHA256 5d4414c07b3b8dd7dc4067d16e5fd0f7f643cee53ff01fe3d1d72802e484ce3c
MD5 5c311f42fe8e0d0f746791d0868e73f0
SHA1 5887c9da90622e07eefb849568f555cb3f91d4f6
SHA512 3566b1ac680b340e57e915a06e372992a19f05bef34da3a336e6c2856f360b817338399853f18fddda3f1a7e5549f1bb8465a584158118b00f5be263bb1b692d
SSDEEP 3072:PFdExGjscLhK+/LNWQO05G5EPXQ7CndGMc2wKiMkuc27VE:PFPjLhBTNKPyQgGMzht2u
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 193KB

file.exe

IMPHASH 158a612a52d4365bdc88fe279a20e1a3
SHA256 5d4414c07b3b8dd7dc4067d16e5fd0f7f643cee53ff01fe3d1d72802e484ce3c
MD5 5c311f42fe8e0d0f746791d0868e73f0
SHA1 5887c9da90622e07eefb849568f555cb3f91d4f6
SHA512 3566b1ac680b340e57e915a06e372992a19f05bef34da3a336e6c2856f360b817338399853f18fddda3f1a7e5549f1bb8465a584158118b00f5be263bb1b692d
SSDEEP 3072:PFdExGjscLhK+/LNWQO05G5EPXQ7CndGMc2wKiMkuc27VE:PFPjLhBTNKPyQgGMzht2u
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30448

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency AddAtomA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetSystemWindowsDirectoryA WriteFile FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA FreeUserPhysicalPages GetCurrentDirectoryA ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange ReadConsoleOutputCharacterW CreateMutexA GetConsoleTitleA SearchPathA FindResourceW FormatMessageW GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetConsoleAliasA GetConsoleTitleW GlobalFlags GetConsoleAliasesLengthA GetVolumePathNameW SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameW GetCurrentProcessId DosDateTimeToFileTime EnumResourceLanguagesW LoadModule _hwrite QueryDosDeviceW CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW EnumCalendarInfoW FindNextFileW SetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Sharing