file[.]exe | Triage™

General

Target
file.exe
Size 195KB
Sample230214-e23s5aaf99
SHA256 98ddbf192242a49b18fcd36c04c4f18814c29c8da0332593805620b114d4c7cd
MD5 9183f6f0df1f025130f38baccbd302fd
SHA1 35201edc00d01fdadd577d856db96ef2cb562078
SHA512 2359c499bca8ce7fef9345b6b858f09ae0939869e88212a22586ccd93e2c959ae1d45e96643cf8291474681ea293fc325ac40c84c5bbda1ff392f152c81be9d4
SSDEEP 3072:1pdluRa5zKmgB+iuBUmdFOttzCFPSNYFt4nzZuEV5FiSh6kzuj:1EcKrammdFYtfet4zZuEV5FHh6r
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 195KB

file.exe

IMPHASH dd0586f5c5e46eff877624b05b375878
SHA256 98ddbf192242a49b18fcd36c04c4f18814c29c8da0332593805620b114d4c7cd
MD5 9183f6f0df1f025130f38baccbd302fd
SHA1 35201edc00d01fdadd577d856db96ef2cb562078
SHA512 2359c499bca8ce7fef9345b6b858f09ae0939869e88212a22586ccd93e2c959ae1d45e96643cf8291474681ea293fc325ac40c84c5bbda1ff392f152c81be9d4
SSDEEP 3072:1pdluRa5zKmgB+iuBUmdFOttzCFPSNYFt4nzZuEV5FiSh6kzuj:1EcKrammdFYtfet4zZuEV5FHh6r
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34707

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryA FindFirstVolumeMountPointW CreateDirectoryExA LocalFlags WaitForSingleObject WriteConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcessId OpenEventW CreateFileMappingW GetLocaleInfoA GetProcAddress LocalAlloc ChangeTimerQueueTimer GetConsoleTitleW CopyFileA GetLongPathNameW SetPriorityClass GetLastError GetProfileSectionW WriteProfileStringA GetConsoleAliasA WritePrivateProfileSectionA GetConsoleAliasesLengthA FindResourceW SetVolumeMountPointA HeapAlloc GetComputerNameW CreateNamedPipeW EnumResourceLanguagesW TransactNamedPipe _hwrite EnumDateFormatsA ZombifyActCtx DeleteVolumeMountPointW GetModuleHandleA AddRefActCtx WritePrivateProfileStringA GetSystemDirectoryA FindNextFileW SetSystemPowerState GetLongPathNameA EnumCalendarInfoW SetLastError SetCriticalSectionSpinCount CloseHandle WriteConsoleW RaiseException RtlUnwind HeapFree DeleteFileA MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW HeapReAlloc CreateFileW

user32

GetMenuBarInfo

Sharing