file[.]exe | Triage™

General

Target
file.exe
Size 288KB
Sample230213-vkn7eaef88
SHA256 e101c41dd5aa67b70dc9852979346e29c42fcfe32d1f6ae1b6c2d69a2e634ac3
MD5 adddcd7cd201c0dbaf9cf28e2f41c7d8
SHA1 a6c818d29e8af128eacad9e2642b886a82e09fc6
SHA512 7ed016321a7fffe61de8863ead24bec79f3a45b171a39bb9ea4a72888d85e81821d4f0da175c8b16279622e94f1305e9dc4e85d39a52960973ce80d4dca43f40
SSDEEP 6144:ACU4j08L+ri1XXg+Tz8IfIufc7yYQpcJbR7QwtUvqP7:AC3L+rMgDIfIIc7yfebPGv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 288KB

file.exe

IMPHASH 89db4fb132eb4013d16b8ca757203146
SHA256 e101c41dd5aa67b70dc9852979346e29c42fcfe32d1f6ae1b6c2d69a2e634ac3
MD5 adddcd7cd201c0dbaf9cf28e2f41c7d8
SHA1 a6c818d29e8af128eacad9e2642b886a82e09fc6
SHA512 7ed016321a7fffe61de8863ead24bec79f3a45b171a39bb9ea4a72888d85e81821d4f0da175c8b16279622e94f1305e9dc4e85d39a52960973ce80d4dca43f40
SSDEEP 6144:ACU4j08L+ri1XXg+Tz8IfIufc7yYQpcJbR7QwtUvqP7:AC3L+rMgDIfIIc7yfebPGv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31795

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryW FindFirstVolumeMountPointW CreateDirectoryExA LocalFlags WaitForMultipleObjects WriteConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcessId OpenEventW CreateFileMappingW GetLocaleInfoW GetProcAddress LocalAlloc ChangeTimerQueueTimer GetConsoleTitleA CopyFileA GetLongPathNameW SetPriorityClass GetLastError GetProfileSectionA WriteProfileStringA GetConsoleAliasW WritePrivateProfileSectionA GetConsoleAliasesLengthA DeleteVolumeMountPointA FindResourceA SetVolumeMountPointW HeapAlloc GetLocaleInfoA GetComputerNameA CreateNamedPipeW EnumResourceLanguagesA TransactNamedPipe _hwrite EnumTimeFormatsA ZombifyActCtx DeleteVolumeMountPointW GetModuleHandleA ReleaseActCtx WritePrivateProfileStringA GetSystemDirectoryA GetSystemPowerStatus GetLongPathNameA FindNextFileA EnumCalendarInfoW SetLastError SetCriticalSectionSpinCount CloseHandle WriteConsoleW RaiseException RtlUnwind HeapFree DeleteFileA MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW HeapReAlloc CreateFileW

user32

GetMenuBarInfo

Sharing