file[.]exe | Triage™

General

Target
file.exe
Size 192KB
Sample230213-r9cccsdh83
SHA256 6feb91b9bb98df912f9f63b2197d9998c3e89b86bc25f3f9b69f2b0271224eb4
MD5 d5e234a8248c68ea536dd36de2cfb175
SHA1 186be9525cd8a585b14fe5a0e2807536db4528c3
SHA512 d34595024caae08bc583e0218cbab3e95f10cd327d7550eff0f6bdf4a82537c4abd37000b36aebcb05767cffe1b99063874d74d9c23e41809ecf04e0755a85a0
SSDEEP 3072:06BNwKpO4hjsYevzSR8TgSZBhz1MyJagx1tldd6Uv9ny3:0OLpn5sVvzSRQwW1ttVv9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 192KB

file.exe

IMPHASH 096c57a489bc9be05d307c86ed0497dc
SHA256 6feb91b9bb98df912f9f63b2197d9998c3e89b86bc25f3f9b69f2b0271224eb4
MD5 d5e234a8248c68ea536dd36de2cfb175
SHA1 186be9525cd8a585b14fe5a0e2807536db4528c3
SHA512 d34595024caae08bc583e0218cbab3e95f10cd327d7550eff0f6bdf4a82537c4abd37000b36aebcb05767cffe1b99063874d74d9c23e41809ecf04e0755a85a0
SSDEEP 3072:06BNwKpO4hjsYevzSR8TgSZBhz1MyJagx1tldd6Uv9ny3:0OLpn5sVvzSRQwW1ttVv9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38499

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateFileW FindActCtxSectionStringW WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryW FindFirstVolumeMountPointW CreateDirectoryExA LocalFlags WaitForMultipleObjects ReadConsoleInputA VerifyVersionInfoW GetVersionExA GetProcessId OpenEventW CreateFileMappingW GetLocaleInfoW GetProcAddress LocalAlloc ChangeTimerQueueTimer GetConsoleTitleA CopyFileA GetLongPathNameW SetPriorityClass GetLastError GetProfileSectionW WriteProfileStringA GetConsoleAliasW WritePrivateProfileSectionA GetConsoleAliasesLengthA DeleteVolumeMountPointA FindResourceA SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId CreateNamedPipeW EnumResourceLanguagesA TransactNamedPipe _hwrite EnumTimeFormatsW ZombifyActCtx DeleteVolumeMountPointW GetModuleHandleA ReleaseActCtx WritePrivateProfileStringA GetSystemDirectoryA GetSystemPowerStatus GetLongPathNameA EnumTimeFormatsA EnumCalendarInfoA FindNextFileA SetLastError SetCriticalSectionSpinCount WriteConsoleW HeapReAlloc RaiseException RtlUnwind HeapFree DeleteFileA MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer IsProcessorFeaturePresent DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW CloseHandle

user32

GetMenuBarInfo

Sharing