file[.]exe | Triage™

General

Target
file.exe
Size 283KB
Sample230206-c5aweafb8x
SHA256 69ddf2411c1926ee15b164c1d02ce6de16a1735a15d927f12e5e050a2e2a5a8a
MD5 a7131fd0aaec3f0b0b9d0ae6d14fc15d
SHA1 f2fa59f955ae245d48441da6e61101b5cd0eb851
SHA512 362c3aefbc816eb00c3e9f0731831edf906e93690e5d0ad9439e394bda33cc69855b821e821af82e5cca9b1f65cc95691dc800cd55bb459e95deb708b05a2917
SSDEEP 3072:aWaKO3hu/jYt2QXXAowLTckFWY23+b5aWmuKahfAA/YDbVbQDBmBOlwuKKo+5Jiq:raKmKQncLTfFRW/atAAIbQDgol5KEJb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 283KB

file.exe

IMPHASH 3ced25aef08debb1b64327bf79b9678c
SHA256 69ddf2411c1926ee15b164c1d02ce6de16a1735a15d927f12e5e050a2e2a5a8a
MD5 a7131fd0aaec3f0b0b9d0ae6d14fc15d
SHA1 f2fa59f955ae245d48441da6e61101b5cd0eb851
SHA512 362c3aefbc816eb00c3e9f0731831edf906e93690e5d0ad9439e394bda33cc69855b821e821af82e5cca9b1f65cc95691dc800cd55bb459e95deb708b05a2917
SSDEEP 3072:aWaKO3hu/jYt2QXXAowLTckFWY23+b5aWmuKahfAA/YDbVbQDBmBOlwuKKo+5Jiq:raKmKQncLTfFRW/atAAIbQDgol5KEJb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31386

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateSemaphoreW RequestWakeupLatency CreateFileA FindActCtxSectionStringW WriteConsoleInputW LoadModule WriteFile FindFirstVolumeMountPointA CreateDirectoryExW GlobalSize WaitForMultipleObjectsEx ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop LCMapStringW GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange CreateMutexA GetConsoleTitleW SearchPathA FindResourceW FreeConsole EndUpdateResourceW GetLastError SetCommMask SetConsoleCursorInfo GetComputerNameExA GetConsoleAliasW WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthW FindResourceA SetVolumeMountPointA GetModuleHandleA HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId CreateNamedPipeW EnumResourceLanguagesA _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA AddRefActCtx WritePrivateProfileStringW GetUserDefaultLangID QueryMemoryResourceNotification WaitForMultipleObjects GetLongPathNameA InterlockedCompareExchange VerifyVersionInfoW EnumCalendarInfoW FindNextFileW EnumTimeFormatsW SetLastError GetConsoleAliasesLengthA SetCriticalSectionSpinCount TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetFilePointer SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMenuBarInfo

Sharing