file[.]exe | Triage™

General

Target
file.exe
Size 419KB
Sample230209-c1wmbagb79
SHA256 096bb6df85abd72e1cdc2e2cbde27630736203f70b84c7242d233cc11845782f
MD5 6c52c9ec979fbc2d10b27bb32f709297
SHA1 6bcccb7726803bda734bc7789a54033c90dd4b2d
SHA512 60b42b812268a5672be2f47d9689f45e209dd722647f07d769d60fcae89f5212ef8f6b7ce2da078edcad562d8f4e4f2f357144615be486979e69f9c0ba053cba
SSDEEP 6144:0M1LoEc16tlaVz/OIUEsHNnutE4G6KueJgIQkeQGScL:0Mar1MnEsHRX4a16IQkeic
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 419KB

file.exe

IMPHASH 48d903c5751da17f2c5d5f89e77b3bb9
SHA256 096bb6df85abd72e1cdc2e2cbde27630736203f70b84c7242d233cc11845782f
MD5 6c52c9ec979fbc2d10b27bb32f709297
SHA1 6bcccb7726803bda734bc7789a54033c90dd4b2d
SHA512 60b42b812268a5672be2f47d9689f45e209dd722647f07d769d60fcae89f5212ef8f6b7ce2da078edcad562d8f4e4f2f357144615be486979e69f9c0ba053cba
SSDEEP 6144:0M1LoEc16tlaVz/OIUEsHNnutE4G6KueJgIQkeQGScL:0Mar1MnEsHRX4a16IQkeic
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20938

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA SetWaitableTimer InterlockedIncrement GetCurrentProcess GetComputerNameW GetTickCount GetNumberFormatA LoadLibraryW GetPrivateProfileStructW GetBinaryTypeA GetGeoInfoA OpenMutexW GetLastError SetLastError GetNumaProcessorNode VirtualAlloc EnumSystemCodePagesW BuildCommDCBW GetProcessWorkingSetSize LocalAlloc AddAtomW GetCommMask FoldStringA GetModuleHandleA ReadConsoleInputW LCMapStringW GetProcAddress SetLocaleInfoA HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

GetListBoxInfo LoadMenuA

advapi32

ReportEventA

Sharing