file[.]exe | Triage™

General

Target
file.exe
Size 192KB
Sample230204-ye8kmsed39
SHA256 07ca09a1b05ea6b7c9f20d6de6e81118b3085f4a58bdd3dee832aa98ef89b720
MD5 387a0398c7ee416a83ff936ae9dec546
SHA1 6e19835e87252e9040082fb88f6e20e2e67e8628
SHA512 009a256827f72eeb4a7c20b995d985db7a93f1b0a09ee8910c6bd1519f808c7938b459dd7a65cb74f8ec6a10513bc6509a224e824470e6781ea21a3e9416ba90
SSDEEP 3072:Kguo1m9TnXLQtouNWPPD5P6SFYYwyDlyLLfbBXfANGW5VwDrxog:Kgq5XLwTNe6p+wz/W5Vu2
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 192KB

file.exe

IMPHASH 847f96cdadc895b3547edbb7a505a62a
SHA256 07ca09a1b05ea6b7c9f20d6de6e81118b3085f4a58bdd3dee832aa98ef89b720
MD5 387a0398c7ee416a83ff936ae9dec546
SHA1 6e19835e87252e9040082fb88f6e20e2e67e8628
SHA512 009a256827f72eeb4a7c20b995d985db7a93f1b0a09ee8910c6bd1519f808c7938b459dd7a65cb74f8ec6a10513bc6509a224e824470e6781ea21a3e9416ba90
SSDEEP 3072:Kguo1m9TnXLQtouNWPPD5P6SFYYwyDlyLLfbBXfANGW5VwDrxog:Kgq5XLwTNe6p+wz/W5Vu2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30516

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency AddAtomA CreateFileA FindActCtxSectionStringA WriteConsoleInputW LoadModule WriteFile FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize WaitForMultipleObjectsEx ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange CreateMutexA GetConsoleTitleA SearchPathA FindResourceW FreeConsole GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetComputerNameExA GetConsoleAliasA WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthA FindResourceA SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameW GetCurrentProcessId DosDateTimeToFileTime EnumResourceLanguagesW _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW InterlockedCompareExchange VerifyVersionInfoW EnumCalendarInfoW FindNextFileW EnumTimeFormatsW SetLastError TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Sharing