file[.]exe | Triage™

General

Target
file.exe
Size 197KB
Sample230213-ktwbzacb22
SHA256 2bba2f6e827728c4de90e1d5e2ddfa99e49ca8bd4df6d3b162324fa33d4802fe
MD5 85fbe5e5be1214311573d0bc17bbe4f5
SHA1 6de4fb45ee815528694199d9ad61c7251aa967be
SHA512 f5f4c9455a8d05b5795748ff9d775b1dc4091b19049dea2f64d758a85a319a08764af262f029723baf2ebc5fba6b6cf214bba717ba6ec8661ec6ea441b93255f
SSDEEP 3072:F3BdcS0JxJ4+KIKGppNFAqC8/Tln38cxFdZJp2fcDXwN4BOO6e843Ux:F3z90PKwppNFAqXTFdXwN4o1e8f
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 197KB

file.exe

IMPHASH a47515f9ebd7f251f383b85609098a78
SHA256 2bba2f6e827728c4de90e1d5e2ddfa99e49ca8bd4df6d3b162324fa33d4802fe
MD5 85fbe5e5be1214311573d0bc17bbe4f5
SHA1 6de4fb45ee815528694199d9ad61c7251aa967be
SHA512 f5f4c9455a8d05b5795748ff9d775b1dc4091b19049dea2f64d758a85a319a08764af262f029723baf2ebc5fba6b6cf214bba717ba6ec8661ec6ea441b93255f
SSDEEP 3072:F3BdcS0JxJ4+KIKGppNFAqC8/Tln38cxFdZJp2fcDXwN4BOO6e843Ux:F3z90PKwppNFAqXTFdXwN4o1e8f
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

35548

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA RequestWakeupLatency CreateFileW FindActCtxSectionStringW WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryW FindFirstVolumeMountPointA CreateDirectoryExA LocalFlags WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointW VerifyVersionInfoW GetVersionExA GetProcessId OpenEventA CreateFileMappingW GetLocaleInfoW GetProcAddress LocalAlloc GetCommandLineW GetUserDefaultLCID OpenMutexW GetConsoleTitleA SearchPathW FindResourceA LoadLibraryW GetPriorityClass GetLastError GetProfileSectionA WriteProfileStringA GetConsoleAliasW WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthA DeleteVolumeMountPointW FindResourceW SetVolumeMountPointA HeapAlloc GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesW TransactNamedPipe _hwrite EnumTimeFormatsW ZombifyActCtx DeleteVolumeMountPointA GetModuleHandleA ReleaseActCtx WritePrivateProfileStringA GetSystemDirectoryA GetSystemPowerStatus SetThreadAffinityMask GetLongPathNameA EnumTimeFormatsA VerifyVersionInfoA EnumCalendarInfoA FindNextFileA SetLastError SetCriticalSectionSpinCount WriteConsoleW CloseHandle RaiseException RtlUnwind HeapFree DeleteFileA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer SetStdHandle

user32

GetComboBoxInfo

Sharing