file[.]exe | Triage™

General

Target
file.exe
Size 390KB
Sample230205-za94caag39
SHA256 542c14158eea3b59e3e077cf66870bfc11c9e7caa9cefe189c687c7906aeb11c
MD5 5ccd3ae51eca1500506de4f5c68bcd5f
SHA1 739c77920cc53eafd4f789927bbc08be89139b6f
SHA512 682c90a511c4de2099b307f165f0410cc6328165308eed95f23bb67150459ce4244f098180d01bf4a401233b62cae92a086f1ed2a8045b7c08d8c72d45bddebc
SSDEEP 6144:7blz8r2L/UTY4qApWT0FPxWPctYEWf/4StnCqR:7blz8ywTJV6qZWxZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 390KB

file.exe

IMPHASH d8ad863864e459165b4fe2dc00d190c0
SHA256 542c14158eea3b59e3e077cf66870bfc11c9e7caa9cefe189c687c7906aeb11c
MD5 5ccd3ae51eca1500506de4f5c68bcd5f
SHA1 739c77920cc53eafd4f789927bbc08be89139b6f
SHA512 682c90a511c4de2099b307f165f0410cc6328165308eed95f23bb67150459ce4244f098180d01bf4a401233b62cae92a086f1ed2a8045b7c08d8c72d45bddebc
SSDEEP 6144:7blz8r2L/UTY4qApWT0FPxWPctYEWf/4StnCqR:7blz8ywTJV6qZWxZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30986

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency CreateFileA FindActCtxSectionStringW WriteConsoleInputW LoadModule WriteFile FindFirstVolumeMountPointA CreateDirectoryExW GlobalSize WaitForMultipleObjectsEx ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop LCMapStringW GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange CreateMutexA GetConsoleTitleW SearchPathA FindResourceW FreeConsole EndUpdateResourceW GetLastError SetCommMask SetConsoleCursorInfo GetComputerNameExA GetConsoleAliasW WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthW FindResourceA SetVolumeMountPointW GetModuleHandleA HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId DosDateTimeToFileTime EnumResourceLanguagesA _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW AddRefActCtx WritePrivateProfileStringW GetUserDefaultLangID QueryMemoryResourceNotification WaitForMultipleObjects GetLongPathNameA InterlockedCompareExchange VerifyVersionInfoW EnumCalendarInfoW FindNextFileW EnumTimeFormatsW SetLastError GetConsoleAliasesLengthA SetCriticalSectionSpinCount TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetFilePointer SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMenuBarInfo

Sharing