file[.]exe | Triage™

General

Target
file.exe
Size 301KB
Sample230206-bxdfwsfa5t
SHA256 98c26c61db80a34fc15b3a282a03da11b5f386946661e83e06a96dfd36596ef0
MD5 a2618a6affbc8eb9fec4ab7d40afcad8
SHA1 bb752d66312af6aebb2e622a943dd41f2f11da4b
SHA512 ff83b7a340d4b2f1fc126444f7d04849fafc803937db2b72ef5a082b5fa121598f66e8fcd58f2cdc425c3c585b0734150654fe8ffffe020dbd1457644c81d1bf
SSDEEP 6144:oHlsDLohJ2RKgd7GPorA9vLpknIiOQDdAMR1frq2Nuj+:oHlsD0hJ21d0orA9j8OQZNjzqGu6
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 301KB

file.exe

IMPHASH 3ced25aef08debb1b64327bf79b9678c
SHA256 98c26c61db80a34fc15b3a282a03da11b5f386946661e83e06a96dfd36596ef0
MD5 a2618a6affbc8eb9fec4ab7d40afcad8
SHA1 bb752d66312af6aebb2e622a943dd41f2f11da4b
SHA512 ff83b7a340d4b2f1fc126444f7d04849fafc803937db2b72ef5a082b5fa121598f66e8fcd58f2cdc425c3c585b0734150654fe8ffffe020dbd1457644c81d1bf
SSDEEP 6144:oHlsDLohJ2RKgd7GPorA9vLpknIiOQDdAMR1frq2Nuj+:oHlsD0hJ21d0orA9j8OQZNjzqGu6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31370

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency CreateFileA FindActCtxSectionStringW WriteConsoleInputW LoadModule WriteFile FindFirstVolumeMountPointA CreateDirectoryExW GlobalSize WaitForMultipleObjectsEx ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop LCMapStringW GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange CreateMutexA GetConsoleTitleW SearchPathA FindResourceW FreeConsole EndUpdateResourceW GetLastError SetCommMask SetConsoleCursorInfo GetComputerNameExA GetConsoleAliasW WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthW FindResourceA SetVolumeMountPointA GetModuleHandleA HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId CreateNamedPipeW EnumResourceLanguagesA _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA AddRefActCtx WritePrivateProfileStringW GetUserDefaultLangID QueryMemoryResourceNotification WaitForMultipleObjects GetLongPathNameA InterlockedCompareExchange VerifyVersionInfoW EnumCalendarInfoW FindNextFileW EnumTimeFormatsW SetLastError GetConsoleAliasesLengthA SetCriticalSectionSpinCount TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetFilePointer SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMenuBarInfo

Sharing