file[.]exe | Triage™

General

Target
file.exe
Size 314KB
Sample230208-qsdcnabb26
SHA256 f4b9bed143b714df0405531aa041fe29bfdecc5e10cfe97002687217fd95cc11
MD5 5cff4c33cbc6e1ccf53952ac54aef16c
SHA1 ec660378cc11724e3914b9f8faec488fc228573b
SHA512 4ed147624483079a6c9276603f8ea662bb89e34dbdaacce451c86090241862ac46e38f3be7dc883d6574484b28062c0d13f387051d1cd42afe78f122c0557a9a
SSDEEP 3072:Lwz0dZZ+B7uOuRpm8fOCbKyEWIcXqjyYFYaTmRLStKRxhUwEbj:Lu0byubph2qErcQHmgtKBEX
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 314KB

file.exe

IMPHASH 2f5b7fed6dc1f658f0b63563ffdd4c3f
SHA256 f4b9bed143b714df0405531aa041fe29bfdecc5e10cfe97002687217fd95cc11
MD5 5cff4c33cbc6e1ccf53952ac54aef16c
SHA1 ec660378cc11724e3914b9f8faec488fc228573b
SHA512 4ed147624483079a6c9276603f8ea662bb89e34dbdaacce451c86090241862ac46e38f3be7dc883d6574484b28062c0d13f387051d1cd42afe78f122c0557a9a
SSDEEP 3072:Lwz0dZZ+B7uOuRpm8fOCbKyEWIcXqjyYFYaTmRLStKRxhUwEbj:Lu0byubph2qErcQHmgtKBEX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20060

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess CancelWaitableTimer GetTickCount GetGeoInfoW lstrcpynW GetShortPathNameA GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW BuildCommDCBW LoadLibraryA InterlockedIncrement LocalAlloc BuildCommDCBAndTimeoutsW GetCommMask AddAtomA GetPrivateProfileStructA FoldStringA GetModuleHandleA GetStringTypeW ReadConsoleInputW LCMapStringW GetDateFormatW SetLocaleInfoA GetProcessWorkingSetSize GetComputerNameA LCMapStringA MultiByteToWideChar HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA

user32

LoadMenuA GetListBoxInfo

gdi32

GetTextExtentExPointW

advapi32

ReportEventA

ole32

ReadClassStg

Sharing