file[.]exe | Triage™

General

Target
file.exe
Size 299KB
Sample230210-abf48aea6x
SHA256 d47c12b089eaddcbaaee2ca55074fc98447869bedb2f30d9f526acc3cd3e6c3f
MD5 b9ab7df2f642f41e38502b9035e371fb
SHA1 c204a5e2a92cd1954e5236829d65c1c4659efbd1
SHA512 e0c0cf5c831f50894efa82099bf414df537dc49507ed98826dd3c80f8c248bcbe9b9ae9a10abc153a038413e1c8d5988dcc89283ee740ccbbb802036b9b27f8f
SSDEEP 6144:j2D3J7CR63U3EZHDrDTzcM35bKvBh+hxl+PtpseNSi:j2D57k6oEZHDrDTzcLBwhstpsQ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 299KB

file.exe

IMPHASH 3cde11de1ae6a53187494063cc0a2730
SHA256 d47c12b089eaddcbaaee2ca55074fc98447869bedb2f30d9f526acc3cd3e6c3f
MD5 b9ab7df2f642f41e38502b9035e371fb
SHA1 c204a5e2a92cd1954e5236829d65c1c4659efbd1
SHA512 e0c0cf5c831f50894efa82099bf414df537dc49507ed98826dd3c80f8c248bcbe9b9ae9a10abc153a038413e1c8d5988dcc89283ee740ccbbb802036b9b27f8f
SSDEEP 6144:j2D3J7CR63U3EZHDrDTzcM35bKvBh+hxl+PtpseNSi:j2D57k6oEZHDrDTzcLBwhstpsQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31555

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA RequestWakeupLatency CreateFileA FindActCtxSectionStringW WriteConsoleInputA GetCommConfig WriteFile FindFirstVolumeMountPointA CreateDirectoryExW LocalFlags WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointA VerifyVersionInfoW GetVersionExW GetProcessId OpenEventA WriteConsoleOutputAttribute GetLocaleInfoW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeW GetUserDefaultLCID OpenMutexA GetConsoleTitleA SearchPathA FindResourceA FreeConsole UpdateResourceW GetLastError GetProfileSectionW SetConsoleCursorInfo GetConsoleAliasW WritePrivateProfileSectionA GlobalFlags GetConsoleAliasesLengthW FindResourceW SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesW SetHandleInformation _hwrite EnumTimeFormatsA ZombifyActCtx DeleteVolumeMountPointA GetModuleHandleA ReleaseActCtx WritePrivateProfileStringA GetSystemDefaultLCID CreateMemoryResourceNotification WaitForSingleObject GetLongPathNameW EnumTimeFormatsW VerifyVersionInfoA EnumCalendarInfoA FindNextFileA SetLastError SetCriticalSectionSpinCount SetStdHandle WriteConsoleW RaiseException RtlUnwind HeapFree DeleteFileA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement HeapCreate EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep HeapSize MultiByteToWideChar WideCharToMultiByte LoadLibraryW LCMapStringW GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer CloseHandle CreateFileW

user32

GetComboBoxInfo

Sharing