file[.]exe | Triage™

General

Target
file.exe
Size 300KB
Sample230207-1c2enafb5y
SHA256 fc44f0279915ff22fb68ea7d761cd86c9ad770dccf87e400ea1ccf73f1bb9f43
MD5 99979b5b5ab72cbe46f4478c2c5f4010
SHA1 ea8fc3caa6e601bd39e657153ebfeb52f34a24b1
SHA512 15441d87db1b05c212f1763ea0aa6e2a9cdb578d3edfeea32171314c91e3a1fa8095cb833c3171dea14539e9ad0c09f1692070e767c4ab3a65be4230bfdd4afd
SSDEEP 6144:pdSvmiLnDo0t6xLmZ0y1hShM21WqTkbl/4+u:pdSvmibDhISr2ghu
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 300KB

file.exe

IMPHASH cb9ba01cd6f8f6d0e1e435171e7d102a
SHA256 fc44f0279915ff22fb68ea7d761cd86c9ad770dccf87e400ea1ccf73f1bb9f43
MD5 99979b5b5ab72cbe46f4478c2c5f4010
SHA1 ea8fc3caa6e601bd39e657153ebfeb52f34a24b1
SHA512 15441d87db1b05c212f1763ea0aa6e2a9cdb578d3edfeea32171314c91e3a1fa8095cb833c3171dea14539e9ad0c09f1692070e767c4ab3a65be4230bfdd4afd
SSDEEP 6144:pdSvmiLnDo0t6xLmZ0y1hShM21WqTkbl/4+u:pdSvmibDhISr2ghu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28991

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA FindActCtxSectionStringA WriteConsoleInputA ClearCommBreak WriteFile FindFirstVolumeMountPointW CreateDirectoryExA LocalSize WaitForMultipleObjects ReadConsoleInputA GetProcessId FreeUserPhysicalPages WriteConsoleOutputAttribute GetLocaleInfoA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeW InterlockedDecrement OpenMutexW GetConsoleTitleA SearchPathA FreeConsole UpdateResourceA GetLastError GetProfileSectionA SetConsoleCursorInfo GetConsoleAliasW WritePrivateProfileSectionW RequestWakeupLatency GetConsoleAliasesLengthA FindResourceW SetVolumeMountPointW GetModuleHandleW HeapAlloc GetLocaleInfoW GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesA SetHandleInformation _hwrite EnumTimeFormatsW CreateActCtxA DeleteVolumeMountPointA AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW EnumTimeFormatsA VerifyVersionInfoA EnumCalendarInfoW FindNextFileW SetLastError SetCriticalSectionSpinCount GlobalFlags LoadLibraryA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetComboBoxInfo

gdi32

GetTextFaceW

Sharing