file[.]exe | Triage™

General

Target
file.exe
Size 276KB
Sample230212-2fcq5sha87
SHA256 1c2ba6e06c4580fcc1cf4cf52302ecb40e38834c858a495c259c6698938b3450
MD5 21e688d6cd359552ae9ba7c51e9ffd63
SHA1 1b7172c98cabaa0e33b2ddb91a5b1573428eef48
SHA512 fa4f478fc6abfb883cc6e3d24d8614817ed6f12c6636f89987b465ab08174ad88e04a64815c1338b8090bf445f38eb49970a017777b37841aa507586937e2a0c
SSDEEP 6144:9JoHq+YPnJChpYgT6QTI5IA4TbcGjr4j8B:97kpYgT6iQEU8
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 276KB

file.exe

IMPHASH e846e4e65f8973af5941088654b5219b
SHA256 1c2ba6e06c4580fcc1cf4cf52302ecb40e38834c858a495c259c6698938b3450
MD5 21e688d6cd359552ae9ba7c51e9ffd63
SHA1 1b7172c98cabaa0e33b2ddb91a5b1573428eef48
SHA512 fa4f478fc6abfb883cc6e3d24d8614817ed6f12c6636f89987b465ab08174ad88e04a64815c1338b8090bf445f38eb49970a017777b37841aa507586937e2a0c
SSDEEP 6144:9JoHq+YPnJChpYgT6QTI5IA4TbcGjr4j8B:97kpYgT6iQEU8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20417

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetCommConfig GetCurrentThread GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA DeleteVolumeMountPointW HeapCreate GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetBinaryTypeW GetTempPathW GetStartupInfoA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize CreateEventW FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW RequestWakeupLatency GetVersionExA GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar GetNumberOfConsoleMouseButtons InterlockedIncrement FindFirstVolumeMountPointW CopyFileExW LCMapStringA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

RealGetWindowClassA DestroyAcceleratorTable RealChildWindowFromPoint IsMenu GetKeyNameTextA NotifyWinEvent IsCharAlphaNumericA LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

ole32

CoRegisterMallocSpy

Sharing