file[.]exe | Triage™

General

Target
file.exe
Size 301KB
Sample230214-bec3eahf28
SHA256 1a48b318e160d17960e9587d05fcaa3a2bfdb369fca1c78f80d486e22eed61a9
MD5 b2031a88f173fdd8acc4c2b5eaaa24b3
SHA1 0f5662098c2c70982c764d06afb6225bcbf09380
SHA512 5363cbf1148f7c3ebaf27115632fd92a73bbe1ea65676fb1a11467598c095f308ac27399b5b7fb6e2296b07ebd8d288e254b00e3764ec5e402a4117f2c36c582
SSDEEP 6144:x7FcjYfEvf7k4F7KvdFA7+S5f+/GfTjhgpHd6:x7FUvf7kIkdW7V2/iJeH
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 301KB

file.exe

IMPHASH dd0586f5c5e46eff877624b05b375878
SHA256 1a48b318e160d17960e9587d05fcaa3a2bfdb369fca1c78f80d486e22eed61a9
MD5 b2031a88f173fdd8acc4c2b5eaaa24b3
SHA1 0f5662098c2c70982c764d06afb6225bcbf09380
SHA512 5363cbf1148f7c3ebaf27115632fd92a73bbe1ea65676fb1a11467598c095f308ac27399b5b7fb6e2296b07ebd8d288e254b00e3764ec5e402a4117f2c36c582
SSDEEP 6144:x7FcjYfEvf7k4F7KvdFA7+S5f+/GfTjhgpHd6:x7FUvf7kIkdW7V2/iJeH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34707

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryA FindFirstVolumeMountPointW CreateDirectoryExA LocalFlags WaitForSingleObject WriteConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcessId OpenEventW CreateFileMappingW GetLocaleInfoA GetProcAddress LocalAlloc ChangeTimerQueueTimer GetConsoleTitleW CopyFileA GetLongPathNameW SetPriorityClass GetLastError GetProfileSectionW WriteProfileStringA GetConsoleAliasA WritePrivateProfileSectionA GetConsoleAliasesLengthA FindResourceW SetVolumeMountPointA HeapAlloc GetComputerNameW CreateNamedPipeW EnumResourceLanguagesW TransactNamedPipe _hwrite EnumDateFormatsA ZombifyActCtx DeleteVolumeMountPointW GetModuleHandleA AddRefActCtx WritePrivateProfileStringA GetSystemDirectoryA FindNextFileW SetSystemPowerState GetLongPathNameA EnumCalendarInfoW SetLastError SetCriticalSectionSpinCount CloseHandle WriteConsoleW RaiseException RtlUnwind HeapFree DeleteFileA MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW HeapReAlloc CreateFileW

user32

GetMenuBarInfo

Sharing