file[.]exe | Triage™

General

Target
file.exe
Size 322KB
Sample230208-vb9fzscd2z
SHA256 b95ff65f77bf2ba3c5798631f03f0eb956c14e5273dcf6e84f38e7d99e2be7e6
MD5 09dea05dcb186025318ff8a7ba05bafc
SHA1 dd2b3c5412215e6f04ee5633d941ee36a2d01278
SHA512 320b791fed48871bb066d2c6dda47b51621a5aee8b7ee84b44b63bc53f0bb21770ceb0c49d122f04ec0a48aca107f7336dcd7f7c2999c4cf25f4f79bc68e10bb
SSDEEP 3072:VPgcr2ddxR9gyneFlqXhk8zzkOdjb/oKeRS+SS8FEnVFJsWQDiuLpnM6uv:VLgrFnUlq3z460kSkscLiqM7v
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH 37437fdf2f996efc4629f1b4dd7357e5
SHA256 b95ff65f77bf2ba3c5798631f03f0eb956c14e5273dcf6e84f38e7d99e2be7e6
MD5 09dea05dcb186025318ff8a7ba05bafc
SHA1 dd2b3c5412215e6f04ee5633d941ee36a2d01278
SHA512 320b791fed48871bb066d2c6dda47b51621a5aee8b7ee84b44b63bc53f0bb21770ceb0c49d122f04ec0a48aca107f7336dcd7f7c2999c4cf25f4f79bc68e10bb
SSDEEP 3072:VPgcr2ddxR9gyneFlqXhk8zzkOdjb/oKeRS+SS8FEnVFJsWQDiuLpnM6uv:VLgrFnUlq3z460kSkscLiqM7v
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21034

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode WriteConsoleOutputCharacterA InterlockedIncrement GetCurrentProcess CancelWaitableTimer GetTickCount LoadLibraryW GetPrivateProfileStructW GetBinaryTypeA GetGeoInfoA OpenMutexW GetLastError SetLastError GetProcAddress SetLocaleInfoA EnumSystemCodePagesW BuildCommDCBW GetProcessWorkingSetSize LocalAlloc GetNumberFormatW GetCommMask AddAtomA FoldStringA GetModuleHandleA ReadConsoleInputW LCMapStringW VirtualAlloc GetComputerNameA LCMapStringA GetStringTypeW HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar

user32

LoadMenuA GetListBoxInfo

advapi32

ReportEventA

ole32

ReadClassStg

Sharing