file[.]exe | Triage™

General

Target
file.exe
Size 301KB
Sample230207-ys91mafd98
SHA256 ee60c72db115870ecc932d9219ece28cbdfd13eec7eb18b0f6db7f22dcbdd3dd
MD5 cd3776f58a1508685a2594ff13de21e8
SHA1 2124c5cf0904b19b8e835fa3dc9e300c6d698004
SHA512 5476ece75afbfecd7a685388fd1e99f5018920d856f1ad5b1ff372daa393197dd3e5b4b6523f29d8917aee5f8ee2771491f9b4dbc229fe347c2095126d292df6
SSDEEP 6144:UQ0/ckLARmUk7BduMsn0Vtn5vxNxlClnBHGY4mO4zshvYALb4nkNt8v24:UQ0/ckURUdjVl5vHvO0N/Bm
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 301KB

file.exe

IMPHASH 87e1f4e32d01d5a52e605f27fd138118
SHA256 ee60c72db115870ecc932d9219ece28cbdfd13eec7eb18b0f6db7f22dcbdd3dd
MD5 cd3776f58a1508685a2594ff13de21e8
SHA1 2124c5cf0904b19b8e835fa3dc9e300c6d698004
SHA512 5476ece75afbfecd7a685388fd1e99f5018920d856f1ad5b1ff372daa393197dd3e5b4b6523f29d8917aee5f8ee2771491f9b4dbc229fe347c2095126d292df6
SSDEEP 6144:UQ0/ckLARmUk7BduMsn0Vtn5vxNxlClnBHGY4mO4zshvYALb4nkNt8v24:UQ0/ckURUdjVl5vHvO0N/Bm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29279

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RequestWakeupLatency CreateFileA FindActCtxSectionStringA WriteConsoleInputA ClearCommBreak WriteFile FindFirstVolumeMountPointW CreateDirectoryExA LocalSize WaitForMultipleObjects ReadConsoleInputA GetProcessId FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop GetLocaleInfoW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange OpenMutexW GetConsoleTitleA SearchPathA FreeConsole EndUpdateResourceA GetLastError GetProfileSectionA SetConsoleCursorInfo GetConsoleAliasW CreateSemaphoreA GlobalFlags GetConsoleAliasesLengthA FindResourceW SetVolumeMountPointW GetModuleHandleW HeapAlloc GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesA SetHandleInformation _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW InterlockedDecrement VerifyVersionInfoA EnumCalendarInfoW FindNextFileW EnumTimeFormatsA SetLastError SetCriticalSectionSpinCount WritePrivateProfileSectionA LoadLibraryA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetComboBoxInfo

gdi32

GetTextFaceW

Sharing