file[.]exe | Triage™

General

Target
file.exe
Size 390KB
Sample230205-w5175sdg71
SHA256 0f1a8733e9f3c83999fc7188087dd0f1f8339c3c13f2df64b0ea8dbeb9b2df84
MD5 3d015f5d62ae7f40a4d7aa2eefaab51f
SHA1 37f460de07387f4ee22b91099be031c53aa3a7ab
SHA512 4589f5f6b53a404f704e083755f16a54ecfec4e3e09492e38a82fdb332a1bf7eaef4484c1286572f6463880b913092159385070cc7fe51fa4005ed9de51c2d61
SSDEEP 6144:CP0WzdgL2/TuuQj9UiCmWm4Rg1FgB1fFlXZMemD/5ywLe+WEi:CP0Wzq6/ij+izRFgbF5ArvLPw
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 390KB

file.exe

IMPHASH d8ad863864e459165b4fe2dc00d190c0
SHA256 0f1a8733e9f3c83999fc7188087dd0f1f8339c3c13f2df64b0ea8dbeb9b2df84
MD5 3d015f5d62ae7f40a4d7aa2eefaab51f
SHA1 37f460de07387f4ee22b91099be031c53aa3a7ab
SHA512 4589f5f6b53a404f704e083755f16a54ecfec4e3e09492e38a82fdb332a1bf7eaef4484c1286572f6463880b913092159385070cc7fe51fa4005ed9de51c2d61
SSDEEP 6144:CP0WzdgL2/TuuQj9UiCmWm4Rg1FgB1fFlXZMemD/5ywLe+WEi:CP0Wzq6/ij+izRFgbF5ArvLPw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30970

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency CreateFileA FindActCtxSectionStringW WriteConsoleInputW LoadModule WriteFile FindFirstVolumeMountPointA CreateDirectoryExW GlobalSize WaitForMultipleObjectsEx ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop LCMapStringW GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange CreateMutexA GetConsoleTitleW SearchPathA FindResourceW FreeConsole EndUpdateResourceW GetLastError SetCommMask SetConsoleCursorInfo GetComputerNameExA GetConsoleAliasW WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthW FindResourceA SetVolumeMountPointW GetModuleHandleA HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId DosDateTimeToFileTime EnumResourceLanguagesA _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringW GetUserDefaultLangID QueryMemoryResourceNotification WaitForMultipleObjects GetLongPathNameA InterlockedCompareExchange VerifyVersionInfoW EnumCalendarInfoW FindNextFileW EnumTimeFormatsW SetLastError GetConsoleAliasesLengthA SetCriticalSectionSpinCount TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetFilePointer SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMenuBarInfo

Sharing