file[.]exe | Triage™

General

Target
file.exe
Size 389KB
Sample230205-thb9dsdd6y
SHA256 8fbe18e11a214838a3faafb76cc01ff88b87697c56fc4590214be791e30fe4f3
MD5 3d7c4a8465a081acfc864b565f1b11ea
SHA1 92e8ec896046a50b1377d2ce6c93031116b7dd07
SHA512 e6a15edf55cdfc2fe2fd72581597973411fdbb954a928e2c04e465e0d4360247d910134bca43838a8655ed4680adea9d139947a9651a30a4c49f7e9dab18691f
SSDEEP 6144:bjCkUL9KiMktMb5ibEo+zRNw3HAgmfxkanfdkqe5d:bjCkURKrktqfo+Pw3e+afeNL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 389KB

file.exe

IMPHASH d76496b570328542e143db87692dabe6
SHA256 8fbe18e11a214838a3faafb76cc01ff88b87697c56fc4590214be791e30fe4f3
MD5 3d7c4a8465a081acfc864b565f1b11ea
SHA1 92e8ec896046a50b1377d2ce6c93031116b7dd07
SHA512 e6a15edf55cdfc2fe2fd72581597973411fdbb954a928e2c04e465e0d4360247d910134bca43838a8655ed4680adea9d139947a9651a30a4c49f7e9dab18691f
SSDEEP 6144:bjCkUL9KiMktMb5ibEo+zRNw3HAgmfxkanfdkqe5d:bjCkURKrktqfo+Pw3e+afeNL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30278

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency CreateFileA FindActCtxSectionStringA WriteConsoleInputW LoadModule WriteFile FindFirstVolumeMountPointA CreateDirectoryExW GlobalSize WaitForMultipleObjectsEx ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange CreateMutexA GetConsoleTitleW SearchPathA FindResourceW FreeConsole EndUpdateResourceW GetLastError SetCommMask SetConsoleCursorInfo GetComputerNameExA GetConsoleAliasW WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthA FindResourceA SetVolumeMountPointW GetModuleHandleA HeapAlloc GetLocaleInfoA GetComputerNameW GetCurrentProcessId DosDateTimeToFileTime EnumResourceLanguagesA _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringW GetUserDefaultLangID QueryMemoryResourceNotification WaitForMultipleObjects GetLongPathNameW InterlockedCompareExchange VerifyVersionInfoW EnumCalendarInfoW FindNextFileW EnumTimeFormatsW SetLastError GetConsoleAliasesLengthW SetCriticalSectionSpinCount TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetFilePointer SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMenuBarInfo

Sharing