file[.]exe | Triage™

General

Target
file.exe
Size 388KB
Sample230204-zcep8aee58
SHA256 005ecef22c9d3efe8d775e29d02e78cfec2792f6b5a3fc04a7dc3d4c74b51ef8
MD5 2493707c0ac2088517d2b3e47a3422ad
SHA1 d6889c3fc4da08eb27a697169d4c526686482a25
SHA512 f3a18155f47223933046952e8d911aa46333d5383e55dc8e6b037a4d9b70a8f36bb1ba6e42db27ab9b286f4600a2e1f29f0448ca84cb8dd53bd04b621a1a34ad
SSDEEP 6144:u1dAkz6LqDDYpEf4yFFwP4KEcXAItZ0qWx0ruvNT4Rn:u1dksDlfJXk4KbACcx0CF4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 388KB

file.exe

IMPHASH 847f96cdadc895b3547edbb7a505a62a
SHA256 005ecef22c9d3efe8d775e29d02e78cfec2792f6b5a3fc04a7dc3d4c74b51ef8
MD5 2493707c0ac2088517d2b3e47a3422ad
SHA1 d6889c3fc4da08eb27a697169d4c526686482a25
SHA512 f3a18155f47223933046952e8d911aa46333d5383e55dc8e6b037a4d9b70a8f36bb1ba6e42db27ab9b286f4600a2e1f29f0448ca84cb8dd53bd04b621a1a34ad
SSDEEP 6144:u1dAkz6LqDDYpEf4yFFwP4KEcXAItZ0qWx0ruvNT4Rn:u1dksDlfJXk4KbACcx0CF4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30532

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency AddAtomA CreateFileA FindActCtxSectionStringA WriteConsoleInputW LoadModule WriteFile FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize WaitForMultipleObjectsEx ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange CreateMutexA GetConsoleTitleA SearchPathA FindResourceW FreeConsole GetModuleHandleA EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetComputerNameExA GetConsoleAliasA WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthA FindResourceA SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameW GetCurrentProcessId DosDateTimeToFileTime EnumResourceLanguagesW _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW InterlockedCompareExchange VerifyVersionInfoW EnumCalendarInfoW FindNextFileW EnumTimeFormatsW SetLastError TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Sharing