file[.]exe | Triage™

General

Target
file.exe
Size 301KB
Sample230214-e7nw6aab41
SHA256 2beccf8a915c34bf6b081c72220805b5871c26fb8e2038b8f6ca7b351cd90061
MD5 aaf2dc125576a201421dd18ca7081a23
SHA1 c782c53a632d9fbe02e117bddde91b39251e511c
SHA512 31d765d30d6c23732f929cf6f14e76d8cb07e99737ff7593b5b64dfa26534fbf50290af7e020f4103770ec9ec24087597c5b976a802e0b289f581ceb6a298186
SSDEEP 6144:suL9R0/VTps9DtlbZYr540hqTCpAdh3NIbs9DUn:suLATpsxHbZYr5vy9eA9+
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 301KB

file.exe

IMPHASH dd0586f5c5e46eff877624b05b375878
SHA256 2beccf8a915c34bf6b081c72220805b5871c26fb8e2038b8f6ca7b351cd90061
MD5 aaf2dc125576a201421dd18ca7081a23
SHA1 c782c53a632d9fbe02e117bddde91b39251e511c
SHA512 31d765d30d6c23732f929cf6f14e76d8cb07e99737ff7593b5b64dfa26534fbf50290af7e020f4103770ec9ec24087597c5b976a802e0b289f581ceb6a298186
SSDEEP 6144:suL9R0/VTps9DtlbZYr540hqTCpAdh3NIbs9DUn:suLATpsxHbZYr5vy9eA9+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34707

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryA FindFirstVolumeMountPointW CreateDirectoryExA LocalFlags WaitForSingleObject WriteConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcessId OpenEventW CreateFileMappingW GetLocaleInfoA GetProcAddress LocalAlloc ChangeTimerQueueTimer GetConsoleTitleW CopyFileA GetLongPathNameW SetPriorityClass GetLastError GetProfileSectionW WriteProfileStringA GetConsoleAliasA WritePrivateProfileSectionA GetConsoleAliasesLengthA FindResourceW SetVolumeMountPointA HeapAlloc GetComputerNameW CreateNamedPipeW EnumResourceLanguagesW TransactNamedPipe _hwrite EnumDateFormatsA ZombifyActCtx DeleteVolumeMountPointW GetModuleHandleA AddRefActCtx WritePrivateProfileStringA GetSystemDirectoryA FindNextFileW SetSystemPowerState GetLongPathNameA EnumCalendarInfoW SetLastError SetCriticalSectionSpinCount CloseHandle WriteConsoleW RaiseException RtlUnwind HeapFree DeleteFileA MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW HeapReAlloc CreateFileW

user32

GetMenuBarInfo

Sharing