file[.]exe | Triage™

General

Target
file.exe
Size 180KB
Sample230213-ggamysbb95
SHA256 3946eba316d97091d39adabfcd310d015b49a694fdc5ec6360d8e3a2bf4f7add
MD5 f2b513354985dcc6c865179192b8d71f
SHA1 3b9c1b9ae3d14bf18a7a2cecca674da7293352f4
SHA512 4957641d2a64f42919d150c2a5a47ffb1831c9ff4a4c961426bb04a904170a318ddd2644573488eac73af6639b55451994f226d669de19f9e536eac80e0a5f54
SSDEEP 3072:2azL2anEx35XMTXkAcYYBokCjziuaxk+3cqg0F:2qniBMLkA1YBruQk
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 180KB

file.exe

IMPHASH 1ec118ddc3b50693168adb7f3df7b684
SHA256 3946eba316d97091d39adabfcd310d015b49a694fdc5ec6360d8e3a2bf4f7add
MD5 f2b513354985dcc6c865179192b8d71f
SHA1 3b9c1b9ae3d14bf18a7a2cecca674da7293352f4
SHA512 4957641d2a64f42919d150c2a5a47ffb1831c9ff4a4c961426bb04a904170a318ddd2644573488eac73af6639b55451994f226d669de19f9e536eac80e0a5f54
SSDEEP 3072:2azL2anEx35XMTXkAcYYBokCjziuaxk+3cqg0F:2qniBMLkA1YBruQk
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19546

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetTickCount GetCommConfig GetCurrentThread GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA DeleteVolumeMountPointW HeapCreate GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetBinaryTypeW GetTempPathW GetStartupInfoA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize CreateEventW FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW RequestWakeupLatency GetVersionExA GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar GetNumberOfConsoleMouseButtons InterlockedIncrement FindFirstVolumeMountPointW CopyFileExW LCMapStringA InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA

user32

IsCharAlphaNumericA DestroyAcceleratorTable RealChildWindowFromPoint IsMenu GetKeyNameTextA NotifyWinEvent RealGetWindowClassA LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

ole32

CoRegisterMallocSpy

Sharing