file[.]exe | Triage™

General

Target
file.exe
Size 181KB
Sample230213-bcnfcsha9v
SHA256 edd350ebaba96f03d9d4e8e965e9cf9152f548cc3ea2adb2a7e36ac2243374ee
MD5 75f05af46235ce799131539b97e53df5
SHA1 806fbbf51381220a861a127490b21ef7c555b685
SHA512 cb116b81c082ffe0f002a684583cc8378354e18b4b0704c3c6ada418a48d4b098c150ce47cdd1ddb3cbb36c764372137191414382599075cc15f8537f79dcaf8
SSDEEP 3072:eCKZ/X55HTQBBL2bqu8T9YbrLDVlIT4kj9DK6Puj:wtTUTkDucHgEc9W4uj
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 181KB

file.exe

IMPHASH 1ec118ddc3b50693168adb7f3df7b684
SHA256 edd350ebaba96f03d9d4e8e965e9cf9152f548cc3ea2adb2a7e36ac2243374ee
MD5 75f05af46235ce799131539b97e53df5
SHA1 806fbbf51381220a861a127490b21ef7c555b685
SHA512 cb116b81c082ffe0f002a684583cc8378354e18b4b0704c3c6ada418a48d4b098c150ce47cdd1ddb3cbb36c764372137191414382599075cc15f8537f79dcaf8
SSDEEP 3072:eCKZ/X55HTQBBL2bqu8T9YbrLDVlIT4kj9DK6Puj:wtTUTkDucHgEc9W4uj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20449

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetTickCount GetCommConfig GetCurrentThread GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA DeleteVolumeMountPointW HeapCreate GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetBinaryTypeW GetTempPathW GetStartupInfoA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize CreateEventW FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW RequestWakeupLatency GetVersionExA GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar GetNumberOfConsoleMouseButtons InterlockedIncrement FindFirstVolumeMountPointW CopyFileExW LCMapStringA InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA

user32

IsCharAlphaNumericA DestroyAcceleratorTable RealChildWindowFromPoint IsMenu GetKeyNameTextA NotifyWinEvent RealGetWindowClassA LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

ole32

CoRegisterMallocSpy

Sharing