file[.]exe | Triage™

General

Target
file.exe
Size 197KB
Sample230209-gd1d7sef72
SHA256 c9f9fc7cde01abdb6a47d6bb89c70a66e63ee5a0b0eb319dd397adac4eefe274
MD5 72acb68a94a3b5dfbc720e67e1215aab
SHA1 61c4bf705b66ad7ddf948095e967ca707d6b8b77
SHA512 999cc2bba7b21fdf9277c0716300b61df2cafc0853ff8a317b1305985ebee3b0ba45bce615d82309326e34ae1eb978c318652b7110d8adcffffb3302e11183cb
SSDEEP 3072:+GsO7cZUS5qUw1LmblWuzd5eY3qLHbedqDVGaZrurRem3Wms/beQQrWZ7:+Gs7hoL2l9aLHiYDVGUqPsbeQQY
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 197KB

file.exe

IMPHASH 5aefb555da349593a2c4f6f3ef54f8a7
SHA256 c9f9fc7cde01abdb6a47d6bb89c70a66e63ee5a0b0eb319dd397adac4eefe274
MD5 72acb68a94a3b5dfbc720e67e1215aab
SHA1 61c4bf705b66ad7ddf948095e967ca707d6b8b77
SHA512 999cc2bba7b21fdf9277c0716300b61df2cafc0853ff8a317b1305985ebee3b0ba45bce615d82309326e34ae1eb978c318652b7110d8adcffffb3302e11183cb
SSDEEP 3072:+GsO7cZUS5qUw1LmblWuzd5eY3qLHbedqDVGaZrurRem3Wms/beQQrWZ7:+Gs7hoL2l9aLHiYDVGUqPsbeQQY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29451

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW ClearCommBreak WriteFile FindFirstVolumeMountPointW CreateDirectoryExA LocalSize WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW VerifyVersionInfoW GetVersionExA GetProcessId OpenEventA WriteConsoleOutputAttribute GetLocaleInfoA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedDecrement OpenMutexW GetConsoleTitleA SearchPathA FreeConsole UpdateResourceA GetLastError GetProfileSectionA SetConsoleCursorInfo GetConsoleAliasW FindActCtxSectionStringA GlobalFlags GetConsoleAliasesLengthW FindResourceW SetVolumeMountPointW GetModuleHandleW HeapAlloc GetLocaleInfoW GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesA SetHandleInformation _hwrite EnumTimeFormatsW CreateActCtxA DeleteVolumeMountPointA AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW EnumTimeFormatsA VerifyVersionInfoA EnumCalendarInfoA FindNextFileW SetLastError SetCriticalSectionSpinCount RequestWakeupLatency CreateFileA WritePrivateProfileSectionA LoadLibraryA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetComboBoxInfo

gdi32

GetTextFaceW

advapi32

SetThreadToken

Sharing