file[.]exe | Triage™

General

Target
file.exe
Size 196KB
Sample230209-kfa4waca7s
SHA256 aded428c9966adbadae848af5e22dd2b89246d9ce8676dd48d5e46d564dbb360
MD5 e693806ca13c6fab9b9b2bac19a255ef
SHA1 efb9b9703a91aba0a7cb71766fdda3ca6b47d6dd
SHA512 553f1006dec866d22722abbf2a21c333b8373d9076d74c2b5b5d23c4cbe0623023e1ec399559ba27bbcf58f943f900a34e4d51a9d9d7a74e1d54bedfc11b0c28
SSDEEP 3072:FVqUOMUY4wuj3L24pWid5LppT7q4jrzwGIweFks4/69BNHLnaBEyupwX:bqUperLRpXpT7q4UGIweFks4mBNb8lJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 196KB

file.exe

IMPHASH 5aefb555da349593a2c4f6f3ef54f8a7
SHA256 aded428c9966adbadae848af5e22dd2b89246d9ce8676dd48d5e46d564dbb360
MD5 e693806ca13c6fab9b9b2bac19a255ef
SHA1 efb9b9703a91aba0a7cb71766fdda3ca6b47d6dd
SHA512 553f1006dec866d22722abbf2a21c333b8373d9076d74c2b5b5d23c4cbe0623023e1ec399559ba27bbcf58f943f900a34e4d51a9d9d7a74e1d54bedfc11b0c28
SSDEEP 3072:FVqUOMUY4wuj3L24pWid5LppT7q4jrzwGIweFks4/69BNHLnaBEyupwX:bqUperLRpXpT7q4UGIweFks4mBNb8lJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29467

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW ClearCommBreak WriteFile FindFirstVolumeMountPointW CreateDirectoryExA LocalSize WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW VerifyVersionInfoW GetVersionExA GetProcessId OpenEventA WriteConsoleOutputAttribute GetLocaleInfoA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedDecrement OpenMutexW GetConsoleTitleA SearchPathA FreeConsole UpdateResourceA GetLastError GetProfileSectionA SetConsoleCursorInfo GetConsoleAliasW FindActCtxSectionStringA GlobalFlags GetConsoleAliasesLengthW FindResourceW SetVolumeMountPointW GetModuleHandleW HeapAlloc GetLocaleInfoW GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesA SetHandleInformation _hwrite EnumTimeFormatsW CreateActCtxA DeleteVolumeMountPointA AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW EnumTimeFormatsA VerifyVersionInfoA EnumCalendarInfoA FindNextFileW SetLastError SetCriticalSectionSpinCount RequestWakeupLatency CreateFileA WritePrivateProfileSectionA LoadLibraryA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetComboBoxInfo

gdi32

GetTextFaceW

advapi32

SetThreadToken

Sharing