file[.]exe | Triage™

General

Target
file.exe
Size 196KB
Sample230209-n6weaabe36
SHA256 cecd23f5afd75ca56e26a1026aad6e51a4c9255bf15cf866f791cf615e2fe7d3
MD5 a3512ca2b28dc801b9102ac6bb50e476
SHA1 062f30896bb7f243537e192c87227fd7cef0ca0e
SHA512 6e492e84c220414b4ac2305fbab244fe6db315341c6d1226f8f78e5227a13fcb06a418d854209856bbc2dbc1ba83c65c92bd2f1a087c302b4e3ea7c16b66fc00
SSDEEP 3072:etSOzS1BXNvu4XHLB++kWXeh5Z+dV22pIis7WZx6K5U2o/BCSKvzXoRI:etSfWaHLpkSs+vtp1IK5U22oSKLN
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 196KB

file.exe

IMPHASH 83d1b8095e33f74e23ddae505b88bb37
SHA256 cecd23f5afd75ca56e26a1026aad6e51a4c9255bf15cf866f791cf615e2fe7d3
MD5 a3512ca2b28dc801b9102ac6bb50e476
SHA1 062f30896bb7f243537e192c87227fd7cef0ca0e
SHA512 6e492e84c220414b4ac2305fbab244fe6db315341c6d1226f8f78e5227a13fcb06a418d854209856bbc2dbc1ba83c65c92bd2f1a087c302b4e3ea7c16b66fc00
SSDEEP 3072:etSOzS1BXNvu4XHLB++kWXeh5Z+dV22pIis7WZx6K5U2o/BCSKvzXoRI:etSfWaHLpkSs+vtp1IK5U22oSKLN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29359

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA FindActCtxSectionStringW WriteConsoleInputW ClearCommError WriteFile FindFirstVolumeMountPointW CreateDirectoryExW LocalSize WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointA OpenWaitableTimerW VerifyVersionInfoW GetVersionExA GetProcessId OpenEventA WriteConsoleOutputAttribute GetLocaleInfoW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedDecrement OpenMutexA GetConsoleTitleA SearchPathA FreeConsole UpdateResourceA GetLastError GetProfileSectionA SetConsoleCursorInfo RequestWakeupLatency WritePrivateProfileSectionA GlobalFlags GetConsoleAliasesLengthW DeleteVolumeMountPointW FindResourceW SetVolumeMountPointW GetModuleHandleW HeapAlloc GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesA SetHandleInformation _hwrite CreateActCtxA DeleteVolumeMountPointA AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID CreateMemoryResourceNotification WaitForSingleObject GetLongPathNameW VerifyVersionInfoA EnumCalendarInfoA FindNextFileW EnumTimeFormatsW SetLastError SetCriticalSectionSpinCount GetConsoleAliasW LoadLibraryA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetComboBoxInfo

advapi32

SetThreadToken

Sharing