file[.]exe | Triage™

General

Target
file.exe
Size 390KB
Sample230205-t1cymsab28
SHA256 9c713aa6a7c58cf98b0db01ae4a223701a88db21448bcdf99d29f2d20ad95ebf
MD5 656d555618112530d1a63259dc9cd871
SHA1 06f212d29a5b11433061af18e7acfe1d769d6f39
SHA512 2cfc359659855cf14774a48287ff8f36b41fb816d731078c5c6263c561cc132cd38a806f5af832e79f2bb38268ca84414c2329a1045e89aca16449a9577ff8df
SSDEEP 6144:x/ZSHLuHGzdEkLrp6Jfkyo1GpGmpg6gAitcwDk8f4:x/ZSHKHEdNzqgjtcwI8A
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 390KB

file.exe

IMPHASH d76496b570328542e143db87692dabe6
SHA256 9c713aa6a7c58cf98b0db01ae4a223701a88db21448bcdf99d29f2d20ad95ebf
MD5 656d555618112530d1a63259dc9cd871
SHA1 06f212d29a5b11433061af18e7acfe1d769d6f39
SHA512 2cfc359659855cf14774a48287ff8f36b41fb816d731078c5c6263c561cc132cd38a806f5af832e79f2bb38268ca84414c2329a1045e89aca16449a9577ff8df
SSDEEP 6144:x/ZSHLuHGzdEkLrp6Jfkyo1GpGmpg6gAitcwDk8f4:x/ZSHKHEdNzqgjtcwI8A
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30278

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency CreateFileA FindActCtxSectionStringA WriteConsoleInputW LoadModule WriteFile FindFirstVolumeMountPointA CreateDirectoryExW GlobalSize WaitForMultipleObjectsEx ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange CreateMutexA GetConsoleTitleW SearchPathA FindResourceW FreeConsole EndUpdateResourceW GetLastError SetCommMask SetConsoleCursorInfo GetComputerNameExA GetConsoleAliasW WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthA FindResourceA SetVolumeMountPointW GetModuleHandleA HeapAlloc GetLocaleInfoA GetComputerNameW GetCurrentProcessId DosDateTimeToFileTime EnumResourceLanguagesA _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringW GetUserDefaultLangID QueryMemoryResourceNotification WaitForMultipleObjects GetLongPathNameW InterlockedCompareExchange VerifyVersionInfoW EnumCalendarInfoW FindNextFileW EnumTimeFormatsW SetLastError GetConsoleAliasesLengthW SetCriticalSectionSpinCount TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetFilePointer SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMenuBarInfo

Sharing