file[.]exe | Triage™

General

Target
file.exe
Size 195KB
Sample230214-dklmvaac52
SHA256 b16ed9d88abe3c1bd4f5f75eb08fa9cf0e8f424ca14a2e750ba07b754f9212a7
MD5 02342d750600a193eeaf0f8a65f75e53
SHA1 418e9cf369451e1e3bea786b453ad3dfbb40ceaa
SHA512 5c5d62fdeb0cf20b22aac56f01e6be6006a2c3ca756af18b386e50463f6f2cd6a9d04288508598fe1ed140f192763cef97af6f758b22d3e81c7e6ae7e27284b9
SSDEEP 3072:fJ7uEa5ztmGoyJrXhbKiK0uBipf34tJ56ummCs3Tpz9Sii88Ok:fsHtxvThbKguQpfItL6aCs3Tl9Si0O
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 195KB

file.exe

IMPHASH dd0586f5c5e46eff877624b05b375878
SHA256 b16ed9d88abe3c1bd4f5f75eb08fa9cf0e8f424ca14a2e750ba07b754f9212a7
MD5 02342d750600a193eeaf0f8a65f75e53
SHA1 418e9cf369451e1e3bea786b453ad3dfbb40ceaa
SHA512 5c5d62fdeb0cf20b22aac56f01e6be6006a2c3ca756af18b386e50463f6f2cd6a9d04288508598fe1ed140f192763cef97af6f758b22d3e81c7e6ae7e27284b9
SSDEEP 3072:fJ7uEa5ztmGoyJrXhbKiK0uBipf34tJ56ummCs3Tpz9Sii88Ok:fsHtxvThbKguQpfItL6aCs3Tl9Si0O
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34707

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryA FindFirstVolumeMountPointW CreateDirectoryExA LocalFlags WaitForSingleObject WriteConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcessId OpenEventW CreateFileMappingW GetLocaleInfoA GetProcAddress LocalAlloc ChangeTimerQueueTimer GetConsoleTitleW CopyFileA GetLongPathNameW SetPriorityClass GetLastError GetProfileSectionW WriteProfileStringA GetConsoleAliasA WritePrivateProfileSectionA GetConsoleAliasesLengthA FindResourceW SetVolumeMountPointA HeapAlloc GetComputerNameW CreateNamedPipeW EnumResourceLanguagesW TransactNamedPipe _hwrite EnumDateFormatsA ZombifyActCtx DeleteVolumeMountPointW GetModuleHandleA AddRefActCtx WritePrivateProfileStringA GetSystemDirectoryA FindNextFileW SetSystemPowerState GetLongPathNameA EnumCalendarInfoW SetLastError SetCriticalSectionSpinCount CloseHandle WriteConsoleW RaiseException RtlUnwind HeapFree DeleteFileA MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW HeapReAlloc CreateFileW

user32

GetMenuBarInfo

Sharing