file[.]exe | Triage™

General

Target
file.exe
Size 390KB
Sample230205-sdwa2adc5z
SHA256 677db163e1a278f4722d6debde4e306b364dd8f03b8f87270ae67c1eec40be03
MD5 ec4e9ce757ccd5e973355fbe413e1370
SHA1 95b017d9d7f77e34ab9cac6fcd89442dd561347a
SHA512 3058f9c69da21597ddd6078ff77ebe6371a104958a306881965b1ae546d646ac4aa3ace599deffa259ad293bf7dc79b08a28c5fdd5883fd4b4834cc27ba6affa
SSDEEP 6144:QjujmKLL2VEtM/zogkCFWTTh4Cr7biaS4QHlTxf+VC:QjujpSVEtKz/F8TTh4DaSJlx+VC
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 390KB

file.exe

IMPHASH d76496b570328542e143db87692dabe6
SHA256 677db163e1a278f4722d6debde4e306b364dd8f03b8f87270ae67c1eec40be03
MD5 ec4e9ce757ccd5e973355fbe413e1370
SHA1 95b017d9d7f77e34ab9cac6fcd89442dd561347a
SHA512 3058f9c69da21597ddd6078ff77ebe6371a104958a306881965b1ae546d646ac4aa3ace599deffa259ad293bf7dc79b08a28c5fdd5883fd4b4834cc27ba6affa
SSDEEP 6144:QjujmKLL2VEtM/zogkCFWTTh4Cr7biaS4QHlTxf+VC:QjujpSVEtKz/F8TTh4DaSJlx+VC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30278

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency CreateFileA FindActCtxSectionStringA WriteConsoleInputW LoadModule WriteFile FindFirstVolumeMountPointA CreateDirectoryExW GlobalSize WaitForMultipleObjectsEx ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange CreateMutexA GetConsoleTitleW SearchPathA FindResourceW FreeConsole EndUpdateResourceW GetLastError SetCommMask SetConsoleCursorInfo GetComputerNameExA GetConsoleAliasW WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthA FindResourceA SetVolumeMountPointW GetModuleHandleA HeapAlloc GetLocaleInfoA GetComputerNameW GetCurrentProcessId DosDateTimeToFileTime EnumResourceLanguagesA _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringW GetUserDefaultLangID QueryMemoryResourceNotification WaitForMultipleObjects GetLongPathNameW InterlockedCompareExchange VerifyVersionInfoW EnumCalendarInfoW FindNextFileW EnumTimeFormatsW SetLastError GetConsoleAliasesLengthW SetCriticalSectionSpinCount TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetFilePointer SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMenuBarInfo

Sharing