file[.]exe | Triage™

General

Target
file.exe
Size 388KB
Sample230205-n7fefsce5y
SHA256 dcecfe61cd34210ef2bf62b447489a9b9a74a1d275f2609ee4959fe46b1e7087
MD5 1c33bfdb724960bef0d068dbf0f49351
SHA1 e6585a5ac24dc526c8a450d99d9b3c8d984810f5
SHA512 f89a3e87e3738dadf88a5e45f2ca0589f7e98d73e969953a000f53f86fa88156fd817c7c83cca48a2e935ca711070d05f7cb6b832a961d27ea9d004ab63ac6e1
SSDEEP 6144:VgTUYxLHLAGSF7wZhOCCXSJz9UPsubSmAio1oo1Nh:VgTUYxLHcGU7wZhONCzvubSso1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 388KB

file.exe

IMPHASH c2ffc2f9d3c1d139c5f92bcaf8cdb977
SHA256 dcecfe61cd34210ef2bf62b447489a9b9a74a1d275f2609ee4959fe46b1e7087
MD5 1c33bfdb724960bef0d068dbf0f49351
SHA1 e6585a5ac24dc526c8a450d99d9b3c8d984810f5
SHA512 f89a3e87e3738dadf88a5e45f2ca0589f7e98d73e969953a000f53f86fa88156fd817c7c83cca48a2e935ca711070d05f7cb6b832a961d27ea9d004ab63ac6e1
SSDEEP 6144:VgTUYxLHLAGSF7wZhOCCXSJz9UPsubSmAio1oo1Nh:VgTUYxLHcGU7wZhONCzvubSso1
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29811

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency CreateFileA FindActCtxSectionStringA WriteConsoleInputW LoadModule WriteFile FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize WaitForMultipleObjectsEx ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange CreateMutexA GetConsoleTitleW SearchPathA FindResourceW FreeConsole EndUpdateResourceW GetLastError SetCommMask LocalReAlloc GetComputerNameExA GetConsoleAliasA WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthA FindResourceA SetVolumeMountPointW GetModuleHandleA HeapAlloc GetLocaleInfoA GetComputerNameW GetCurrentProcessId DosDateTimeToFileTime EnumResourceLanguagesW _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW InterlockedCompareExchange VerifyVersionInfoW EnumCalendarInfoW FindNextFileW EnumTimeFormatsW SetLastError GetConsoleAliasesLengthW SetCriticalSectionSpinCount TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree MoveFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle DeleteFileA

user32

GetMenuBarInfo

Sharing