file[.]exe | Triage™

General

Target
file.exe
Size 196KB
Sample230209-jx94vsbd25
SHA256 6cb9d360ce34aa7ea88f72fa666f362c8e5b26fdadcdd94ea99b749830ad3bb2
MD5 0d5fd71d534788964c05eab2e8b1c996
SHA1 392b62f82a8c5d8c3eaaa42c8a63c0a28c44691d
SHA512 55f8b81547887fdad1f5b45a2c7d07bec1117e8b04f6a93fc3eeee1c78ed29f9daaf71baa31073c00e4e14e9fd9457ca24cb4f4fd7e83ddacfbc74d750d2ab9e
SSDEEP 3072:7wqgOMdrvELee1LFz/W2d5A7Bt+jPBoB7kBRwDJB8ei/NiMjgsY:UqgZvbWLt/qtYpoB7kbwQeiVPUsY
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 196KB

file.exe

IMPHASH 5aefb555da349593a2c4f6f3ef54f8a7
SHA256 6cb9d360ce34aa7ea88f72fa666f362c8e5b26fdadcdd94ea99b749830ad3bb2
MD5 0d5fd71d534788964c05eab2e8b1c996
SHA1 392b62f82a8c5d8c3eaaa42c8a63c0a28c44691d
SHA512 55f8b81547887fdad1f5b45a2c7d07bec1117e8b04f6a93fc3eeee1c78ed29f9daaf71baa31073c00e4e14e9fd9457ca24cb4f4fd7e83ddacfbc74d750d2ab9e
SSDEEP 3072:7wqgOMdrvELee1LFz/W2d5A7Bt+jPBoB7kBRwDJB8ei/NiMjgsY:UqgZvbWLt/qtYpoB7kbwQeiVPUsY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29467

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW ClearCommBreak WriteFile FindFirstVolumeMountPointW CreateDirectoryExA LocalSize WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW VerifyVersionInfoW GetVersionExA GetProcessId OpenEventA WriteConsoleOutputAttribute GetLocaleInfoA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedDecrement OpenMutexW GetConsoleTitleA SearchPathA FreeConsole UpdateResourceA GetLastError GetProfileSectionA SetConsoleCursorInfo GetConsoleAliasW FindActCtxSectionStringA GlobalFlags GetConsoleAliasesLengthW FindResourceW SetVolumeMountPointW GetModuleHandleW HeapAlloc GetLocaleInfoW GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesA SetHandleInformation _hwrite EnumTimeFormatsW CreateActCtxA DeleteVolumeMountPointA AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW EnumTimeFormatsA VerifyVersionInfoA EnumCalendarInfoA FindNextFileW SetLastError SetCriticalSectionSpinCount RequestWakeupLatency CreateFileA WritePrivateProfileSectionA LoadLibraryA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetComboBoxInfo

gdi32

GetTextFaceW

advapi32

SetThreadToken

Sharing