file[.]exe | Triage™

General

Target
file.exe
Size 250KB
Sample230207-sdbavscc56
SHA256 d85d8e7789de173ab6af6cddbd31fe5c024987627abfa8ae0f42f6e995d1f205
MD5 6f7e78d6fa755e44b008a230436b42e6
SHA1 4dfea2a68e43b36c204991230e48f02fc7112ef4
SHA512 7d1b051e5f64048f6916fc2c7cffa55a1cc5c8f3ae57ff0e87cfb7e918fe01b60c13c48f30b0a31b93b35c2047d6b6b3fe5583401c3b6cdc654519068c908f93
SSDEEP 6144:lGGBqWhLq3j6D3YuXwg+Oxl6knNYqWWQYHIoJKjfNR:lGGAWhu3jnQwyxXWWQYHIoy
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 250KB

file.exe

IMPHASH cdb2dd381be56018fc9552ac3271a401
SHA256 d85d8e7789de173ab6af6cddbd31fe5c024987627abfa8ae0f42f6e995d1f205
MD5 6f7e78d6fa755e44b008a230436b42e6
SHA1 4dfea2a68e43b36c204991230e48f02fc7112ef4
SHA512 7d1b051e5f64048f6916fc2c7cffa55a1cc5c8f3ae57ff0e87cfb7e918fe01b60c13c48f30b0a31b93b35c2047d6b6b3fe5583401c3b6cdc654519068c908f93
SSDEEP 6144:lGGBqWhLq3j6D3YuXwg+Oxl6knNYqWWQYHIoJKjfNR:lGGAWhu3jnQwyxXWWQYHIoy
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30719

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RequestWakeupLatency CreateFileA FindActCtxSectionStringA WriteConsoleInputA ClearCommBreak WriteFile FindFirstVolumeMountPointA CreateDirectoryExW LocalSize WaitForMultipleObjects ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop LCMapStringW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange OpenMutexW GetConsoleTitleW SearchPathA FreeConsole GetModuleHandleW EndUpdateResourceA GetLastError GetProfileSectionA SetConsoleCursorInfo GetConsoleAliasA CreateSemaphoreW GlobalFlags GetConsoleAliasesLengthA FindResourceA SetVolumeMountPointA GetModuleHandleA HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId CreateNamedPipeW EnumResourceLanguagesA SetHandleInformation _hwrite EnumTimeFormatsA CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA AddRefActCtx WritePrivateProfileStringW GetUserDefaultLangID QueryMemoryResourceNotification GetLongPathNameA InterlockedDecrement EnumTimeFormatsW VerifyVersionInfoA EnumCalendarInfoW FindNextFileW SetLastError SetCriticalSectionSpinCount WritePrivateProfileSectionW LoadLibraryA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetMenuBarInfo

gdi32

GetTextFaceA

Sharing