file[.]exe | Triage™

General

Target
file.exe
Size 418KB
Sample230209-bc75rsda63
SHA256 ba06dbb9474f3051a6f5ea7c7cec3fa103d2f764d59ff1b67f1d5456e0e142a1
MD5 6c92aa5416ef0b1d384651e6e39f0f9a
SHA1 292a3bc12423bd6d003a7e6efcae5f724af1c9e9
SHA512 e27a5f293fc75a39c628bfba8ffab898767490b5d47cee8cd53c677a0969df50b97baf52ecab78f2e5ffcdb5ae1becedcd583afba0b007a85ce6c94763e38a1d
SSDEEP 6144:kMaPnA55h6aecejp9mwy2R1HsYxBExXZVsMw4QkeQGSmF:kMwny+lceXmnm1pxBExbswQkei
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 418KB

file.exe

IMPHASH 48d903c5751da17f2c5d5f89e77b3bb9
SHA256 ba06dbb9474f3051a6f5ea7c7cec3fa103d2f764d59ff1b67f1d5456e0e142a1
MD5 6c92aa5416ef0b1d384651e6e39f0f9a
SHA1 292a3bc12423bd6d003a7e6efcae5f724af1c9e9
SHA512 e27a5f293fc75a39c628bfba8ffab898767490b5d47cee8cd53c677a0969df50b97baf52ecab78f2e5ffcdb5ae1becedcd583afba0b007a85ce6c94763e38a1d
SSDEEP 6144:kMaPnA55h6aecejp9mwy2R1HsYxBExXZVsMw4QkeQGSmF:kMwny+lceXmnm1pxBExbswQkei
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20954

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA SetWaitableTimer InterlockedIncrement GetCurrentProcess GetComputerNameW GetTickCount GetNumberFormatA LoadLibraryW GetPrivateProfileStructW GetBinaryTypeA GetGeoInfoA OpenMutexW GetLastError SetLastError GetNumaProcessorNode VirtualAlloc EnumSystemCodePagesW BuildCommDCBW GetProcessWorkingSetSize LocalAlloc AddAtomW GetCommMask FoldStringA GetModuleHandleA ReadConsoleInputW LCMapStringW GetProcAddress SetLocaleInfoA HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

GetListBoxInfo LoadMenuA

advapi32

ReportEventA

Sharing