file[.]exe | Triage™

General

Target
file.exe
Size 313KB
Sample230208-nnv1ssae82
SHA256 2de2d13e9f0a9976e2e7ab06787248ca13cd1bdb0f7f31fdd3c121d8459d0f06
MD5 f5c5baea8eb104af7035d8f579050a7a
SHA1 109d2af53b436636353cb11491abee09296368e3
SHA512 b4e762e3ef5ee2f86afbf5deb8423ccab1de3325797dafd2a80c4290140fb2558aa5d764e0ebc2b60ecc5729e642a9e600c79909d5ecf36ff04fb3712bbc966b
SSDEEP 3072:mwwq8eNGtRlyb7KbKqKNLwE2PCDh9+UNkn7q+kpWByUAl1j3BWnU:mp2QyX5RM2hzknFkpWUj7In
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 313KB

file.exe

IMPHASH 44724d6c2abffef4f6a69c1f8fdec6cf
SHA256 2de2d13e9f0a9976e2e7ab06787248ca13cd1bdb0f7f31fdd3c121d8459d0f06
MD5 f5c5baea8eb104af7035d8f579050a7a
SHA1 109d2af53b436636353cb11491abee09296368e3
SHA512 b4e762e3ef5ee2f86afbf5deb8423ccab1de3325797dafd2a80c4290140fb2558aa5d764e0ebc2b60ecc5729e642a9e600c79909d5ecf36ff04fb3712bbc966b
SSDEEP 3072:mwwq8eNGtRlyb7KbKqKNLwE2PCDh9+UNkn7q+kpWByUAl1j3BWnU:mp2QyX5RM2hzknFkpWUj7In
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20320

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess CancelWaitableTimer GetTickCount GetGeoInfoW GlobalAlloc lstrcpynW EnumSystemCodePagesA GetShortPathNameA GetLastError GetProcAddress VirtualAlloc LoadLibraryA BuildCommDCBAndTimeoutsW GetCommMask AddAtomA GetPrivateProfileStructA FoldStringA GetModuleHandleA SetLocaleInfoW BuildCommDCBA ReadConsoleInputW LCMapStringW GetDateFormatW InterlockedIncrement GetProcessWorkingSetSize GetComputerNameA LCMapStringA GetStringTypeW HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar

user32

LoadMenuA GetListBoxInfo

gdi32

GetTextExtentExPointW

advapi32

ReportEventA

ole32

ReadClassStg

Sharing