file[.]exe | Triage™

General

Target
file.exe
Size 194KB
Sample230209-3xahsade7s
SHA256 756fdad2d0d9ea070a7bdcf7aad06d0b3d442b8e31e2e7b28315a473bf2da981
MD5 baf3604306b1a9eaa963aa3de73ffa5d
SHA1 dcc385d753b68fa79e6a8ee664fccd1e5e2c663f
SHA512 1c7f3abadd07f223375d85f30e3979e21c9d0e42beddcb8f4fd7dc45cf020de4ff9af11715c88be67e6bbdd46d69ba8923db4eebcba23a431a44c27091c3d365
SSDEEP 3072:lEmvT+0qrfypbtRvnit8kyv5fieA+b5SVpIOjEPEg8cw1JgJF8:2mb+0G8Rfit8kyv555SHjVgzw1JG8
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 194KB

file.exe

IMPHASH 3cde11de1ae6a53187494063cc0a2730
SHA256 756fdad2d0d9ea070a7bdcf7aad06d0b3d442b8e31e2e7b28315a473bf2da981
MD5 baf3604306b1a9eaa963aa3de73ffa5d
SHA1 dcc385d753b68fa79e6a8ee664fccd1e5e2c663f
SHA512 1c7f3abadd07f223375d85f30e3979e21c9d0e42beddcb8f4fd7dc45cf020de4ff9af11715c88be67e6bbdd46d69ba8923db4eebcba23a431a44c27091c3d365
SSDEEP 3072:lEmvT+0qrfypbtRvnit8kyv5fieA+b5SVpIOjEPEg8cw1JgJF8:2mb+0G8Rfit8kyv555SHjVgzw1JG8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31571

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA RequestWakeupLatency CreateFileA FindActCtxSectionStringW WriteConsoleInputA GetCommConfig WriteFile FindFirstVolumeMountPointA CreateDirectoryExW LocalFlags WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointA VerifyVersionInfoW GetVersionExW GetProcessId OpenEventA WriteConsoleOutputAttribute GetLocaleInfoW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeW GetUserDefaultLCID OpenMutexA GetConsoleTitleA SearchPathA FindResourceA FreeConsole UpdateResourceW GetLastError GetProfileSectionW SetConsoleCursorInfo GetConsoleAliasW WritePrivateProfileSectionA GlobalFlags GetConsoleAliasesLengthW FindResourceW SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesW SetHandleInformation _hwrite EnumTimeFormatsA ZombifyActCtx DeleteVolumeMountPointA GetModuleHandleA ReleaseActCtx WritePrivateProfileStringA GetSystemDefaultLCID CreateMemoryResourceNotification WaitForSingleObject GetLongPathNameW EnumTimeFormatsW VerifyVersionInfoA EnumCalendarInfoA FindNextFileA SetLastError SetCriticalSectionSpinCount SetStdHandle WriteConsoleW RaiseException RtlUnwind HeapFree DeleteFileA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement HeapCreate EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep HeapSize MultiByteToWideChar WideCharToMultiByte LoadLibraryW LCMapStringW GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer CloseHandle CreateFileW

user32

GetComboBoxInfo

Sharing