file[.]exe | Triage™

General

Target
file.exe
Size 196KB
Sample230209-htsjzagf91
SHA256 3ea36976172bbafbf4c64935cf228deb1955e539325738ad2ae50860e149d021
MD5 f2c705a9d93ffc8c3f21e0e5c037e231
SHA1 1d01b4386b2a5ae887d7583e2af58ed5c704244b
SHA512 b50eb338ce20dd1cab01e1ece652cd2f7e1fa7761ae08f01459c3f37036f40d7148f4130aef2c5fa9385a996bb6606f892932e44e1430990958c6c7a3898234b
SSDEEP 3072:eGAOvyMUiPCz+LYj5sW3zd5qlTFnBgLAWqi+eQVhWdu2iAj:eGAvV6Lc5sVjBgN+Lbe
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 196KB

file.exe

IMPHASH 5aefb555da349593a2c4f6f3ef54f8a7
SHA256 3ea36976172bbafbf4c64935cf228deb1955e539325738ad2ae50860e149d021
MD5 f2c705a9d93ffc8c3f21e0e5c037e231
SHA1 1d01b4386b2a5ae887d7583e2af58ed5c704244b
SHA512 b50eb338ce20dd1cab01e1ece652cd2f7e1fa7761ae08f01459c3f37036f40d7148f4130aef2c5fa9385a996bb6606f892932e44e1430990958c6c7a3898234b
SSDEEP 3072:eGAOvyMUiPCz+LYj5sW3zd5qlTFnBgLAWqi+eQVhWdu2iAj:eGAvV6Lc5sVjBgN+Lbe
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29451

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW ClearCommBreak WriteFile FindFirstVolumeMountPointW CreateDirectoryExA LocalSize WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW VerifyVersionInfoW GetVersionExA GetProcessId OpenEventA WriteConsoleOutputAttribute GetLocaleInfoA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedDecrement OpenMutexW GetConsoleTitleA SearchPathA FreeConsole UpdateResourceA GetLastError GetProfileSectionA SetConsoleCursorInfo GetConsoleAliasW FindActCtxSectionStringA GlobalFlags GetConsoleAliasesLengthW FindResourceW SetVolumeMountPointW GetModuleHandleW HeapAlloc GetLocaleInfoW GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesA SetHandleInformation _hwrite EnumTimeFormatsW CreateActCtxA DeleteVolumeMountPointA AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW EnumTimeFormatsA VerifyVersionInfoA EnumCalendarInfoA FindNextFileW SetLastError SetCriticalSectionSpinCount RequestWakeupLatency CreateFileA WritePrivateProfileSectionA LoadLibraryA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetComboBoxInfo

gdi32

GetTextFaceW

advapi32

SetThreadToken

Sharing