file[.]exe | Triage™

General

Target
file.exe
Size 299KB
Sample230209-zbveaacc37
SHA256 995eb63354d330bc029dd5a81c886efc0743cd8cceffa47cdc0d4e8cef1edcf1
MD5 f2f874379579a71ac3b454118465ccfa
SHA1 714941bfedb1b91c1d96e4cb71dc3d76faf6f5bd
SHA512 0e96f181ecbabbd52197987205426edbc55fe4aafee6b2d2292bdaed02d9340dfb9847a3a2fcfc37ebc4d90c251273d0be156f68d727ba27bc0bb97aaf634efe
SSDEEP 6144:/toW4yRiHLSz4XhKc7zc28HBWEW3RgR2/K+FUyovZJpW:/tox0i+z4XhN7YhWEWBgR2/K++
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 299KB

file.exe

IMPHASH 3ae714bb16df7ea6110fd4db3c856d1e
SHA256 995eb63354d330bc029dd5a81c886efc0743cd8cceffa47cdc0d4e8cef1edcf1
MD5 f2f874379579a71ac3b454118465ccfa
SHA1 714941bfedb1b91c1d96e4cb71dc3d76faf6f5bd
SHA512 0e96f181ecbabbd52197987205426edbc55fe4aafee6b2d2292bdaed02d9340dfb9847a3a2fcfc37ebc4d90c251273d0be156f68d727ba27bc0bb97aaf634efe
SSDEEP 6144:/toW4yRiHLSz4XhKc7zc28HBWEW3RgR2/K+FUyovZJpW:/tox0i+z4XhN7YhWEWBgR2/K++
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31555

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA RequestWakeupLatency CreateFileA FindActCtxSectionStringW WriteConsoleInputW ClearCommError WriteFile FindFirstVolumeMountPointA CreateDirectoryExW LocalFlags WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointA VerifyVersionInfoW GetVersionExW GetProcessId OpenEventA WriteConsoleOutputAttribute GetLocaleInfoW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeW OpenMutexA GetConsoleTitleA SearchPathA FindResourceA FreeConsole UpdateResourceW GetLastError GetProfileSectionW SetConsoleCursorInfo GetConsoleAliasW WritePrivateProfileSectionA GlobalFlags GetConsoleAliasesLengthW FindResourceW SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesW SetHandleInformation _hwrite EnumTimeFormatsA ZombifyActCtx DeleteVolumeMountPointA GetModuleHandleA ReleaseActCtx WritePrivateProfileStringA GetUserDefaultLangID CreateMemoryResourceNotification WaitForSingleObject GetLongPathNameW EnumTimeFormatsW VerifyVersionInfoA EnumCalendarInfoA FindNextFileA SetLastError SetCriticalSectionSpinCount SetStdHandle WriteConsoleW RaiseException RtlUnwind HeapFree DeleteFileA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement HeapCreate EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep HeapSize MultiByteToWideChar WideCharToMultiByte LoadLibraryW LCMapStringW GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer CloseHandle CreateFileW

user32

GetComboBoxInfo

Sharing