file[.]exe | Triage™

General

Target
file.exe
Size 301KB
Sample230214-ab2e6ahc77
SHA256 bdd27f75f15db71de2b4668637f3ee515349a7b700422c9d9cdfe922bc382515
MD5 757005852f29a97a4e547320555a5fb7
SHA1 c8c5f1f81d07511b823d15717f0703d6e6860b29
SHA512 d095eed3df3637690d2692bb0b8653830901fcee5ef407be2ca2033e9d2d816317f6ae2e0658f1a955be5cd3714ffa356b9d6d6667174e6f19d1ca4eb97e9235
SSDEEP 6144:YTQdXhXwzQOoEHJD0TNzsbAdS9bWoYhdc+xTgi:YTQvgQOvAdS9J
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 301KB

file.exe

IMPHASH dd0586f5c5e46eff877624b05b375878
SHA256 bdd27f75f15db71de2b4668637f3ee515349a7b700422c9d9cdfe922bc382515
MD5 757005852f29a97a4e547320555a5fb7
SHA1 c8c5f1f81d07511b823d15717f0703d6e6860b29
SHA512 d095eed3df3637690d2692bb0b8653830901fcee5ef407be2ca2033e9d2d816317f6ae2e0658f1a955be5cd3714ffa356b9d6d6667174e6f19d1ca4eb97e9235
SSDEEP 6144:YTQdXhXwzQOoEHJD0TNzsbAdS9bWoYhdc+xTgi:YTQvgQOvAdS9J
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34707

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryA FindFirstVolumeMountPointW CreateDirectoryExA LocalFlags WaitForSingleObject WriteConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcessId OpenEventW CreateFileMappingW GetLocaleInfoA GetProcAddress LocalAlloc ChangeTimerQueueTimer GetConsoleTitleW CopyFileA GetLongPathNameW SetPriorityClass GetLastError GetProfileSectionW WriteProfileStringA GetConsoleAliasA WritePrivateProfileSectionA GetConsoleAliasesLengthA FindResourceW SetVolumeMountPointA HeapAlloc GetComputerNameW CreateNamedPipeW EnumResourceLanguagesW TransactNamedPipe _hwrite EnumDateFormatsA ZombifyActCtx DeleteVolumeMountPointW GetModuleHandleA AddRefActCtx WritePrivateProfileStringA GetSystemDirectoryA FindNextFileW SetSystemPowerState GetLongPathNameA EnumCalendarInfoW SetLastError SetCriticalSectionSpinCount CloseHandle WriteConsoleW RaiseException RtlUnwind HeapFree DeleteFileA MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW HeapReAlloc CreateFileW

user32

GetMenuBarInfo

Sharing