file[.]exe | Triage™

General

Target
file.exe
Size 322KB
Sample230209-abftfsba2y
SHA256 bf186ce696de63f1e1cb403cb30a7a0bb085eab2533e2f44df6b9dc42d436661
MD5 7fedccaef9250657cc92b975aaafb422
SHA1 81b657d19ddae24af2fb70d3057277f90be46569
SHA512 730b2b559311845af97b219e2056d83898ccbcfb973573f7bb0c94e60efad8bc1df158de4e95cfa25aa9bd1ac6e3fe7706f8d48eb2cd5f57a5ce2661257999c6
SSDEEP 3072:TPEanYGSPRdg7Hi3wzuDPOhAVhNSXOIqsCQENe+pGSNQNdz3:TMandEg7Hi1POhOhHIqVQkeQGSqn
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH 48d903c5751da17f2c5d5f89e77b3bb9
SHA256 bf186ce696de63f1e1cb403cb30a7a0bb085eab2533e2f44df6b9dc42d436661
MD5 7fedccaef9250657cc92b975aaafb422
SHA1 81b657d19ddae24af2fb70d3057277f90be46569
SHA512 730b2b559311845af97b219e2056d83898ccbcfb973573f7bb0c94e60efad8bc1df158de4e95cfa25aa9bd1ac6e3fe7706f8d48eb2cd5f57a5ce2661257999c6
SSDEEP 3072:TPEanYGSPRdg7Hi3wzuDPOhAVhNSXOIqsCQENe+pGSNQNdz3:TMandEg7Hi1POhOhHIqVQkeQGSqn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20938

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA SetWaitableTimer InterlockedIncrement GetCurrentProcess GetComputerNameW GetTickCount GetNumberFormatA LoadLibraryW GetPrivateProfileStructW GetBinaryTypeA GetGeoInfoA OpenMutexW GetLastError SetLastError GetNumaProcessorNode VirtualAlloc EnumSystemCodePagesW BuildCommDCBW GetProcessWorkingSetSize LocalAlloc AddAtomW GetCommMask FoldStringA GetModuleHandleA ReadConsoleInputW LCMapStringW GetProcAddress SetLocaleInfoA HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

GetListBoxInfo LoadMenuA

advapi32

ReportEventA

Sharing