file[.]exe | Triage™

General

Target
file.exe
Size 302KB
Sample230213-lhmfcsbf6x
SHA256 2f98b200bfc8d4e5f137f4da8470c6f4ea826cf2135d84e79ffa756edb6b915a
MD5 0f2d1e2aee44b262b2f19e07a20f3f87
SHA1 01017723ff2be61d82f497b55e04f2413ca519a9
SHA512 ace786e0131770e7e3a4319d43aea8028d9d39a5a149bdf0933c308058e17e2828278fef88d2ad41f9a165e54f969990c8bd4bcde6a580298d21f6c179e7afc8
SSDEEP 6144:mzfw7wKSWOL7Szj+b5suzyAbC74QPjb8TugttNkW7j:ofwd8/Szj+LzlQPjbOXbWW7
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 302KB

file.exe

IMPHASH a47515f9ebd7f251f383b85609098a78
SHA256 2f98b200bfc8d4e5f137f4da8470c6f4ea826cf2135d84e79ffa756edb6b915a
MD5 0f2d1e2aee44b262b2f19e07a20f3f87
SHA1 01017723ff2be61d82f497b55e04f2413ca519a9
SHA512 ace786e0131770e7e3a4319d43aea8028d9d39a5a149bdf0933c308058e17e2828278fef88d2ad41f9a165e54f969990c8bd4bcde6a580298d21f6c179e7afc8
SSDEEP 6144:mzfw7wKSWOL7Szj+b5suzyAbC74QPjb8TugttNkW7j:ofwd8/Szj+LzlQPjbOXbWW7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

35548

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA RequestWakeupLatency CreateFileW FindActCtxSectionStringW WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryW FindFirstVolumeMountPointA CreateDirectoryExA LocalFlags WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointW VerifyVersionInfoW GetVersionExA GetProcessId OpenEventA CreateFileMappingW GetLocaleInfoW GetProcAddress LocalAlloc GetCommandLineW GetUserDefaultLCID OpenMutexW GetConsoleTitleA SearchPathW FindResourceA LoadLibraryW GetPriorityClass GetLastError GetProfileSectionA WriteProfileStringA GetConsoleAliasW WritePrivateProfileSectionW GlobalFlags GetConsoleAliasesLengthA DeleteVolumeMountPointW FindResourceW SetVolumeMountPointA HeapAlloc GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesW TransactNamedPipe _hwrite EnumTimeFormatsW ZombifyActCtx DeleteVolumeMountPointA GetModuleHandleA ReleaseActCtx WritePrivateProfileStringA GetSystemDirectoryA GetSystemPowerStatus SetThreadAffinityMask GetLongPathNameA EnumTimeFormatsA VerifyVersionInfoA EnumCalendarInfoA FindNextFileA SetLastError SetCriticalSectionSpinCount WriteConsoleW CloseHandle RaiseException RtlUnwind HeapFree DeleteFileA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer SetStdHandle

user32

GetComboBoxInfo

Sharing