file[.]exe | Triage™

General

Target
file.exe
Size 195KB
Sample230214-ea3daahh41
SHA256 849d6739e15eb62ff2b3fd09564f08321c3f5d14f2aada829a9b23e603e99bd0
MD5 b12349c4e286ed6d47ae911d49ea4db3
SHA1 ae40dfda0368d4693b3d536e51339eb28f4a7a22
SHA512 e318d8c3d088b084e68db87c87e0250c6d10c9f27139fc9d51c2bc772a8e92b674f289d3fe375843096bc5fa95a20e41680bff662ff18f78cdc6a6e16ac1a425
SSDEEP 6144:7RkObQHQnYr1GT5CTBMoN/mZFlCYMPeUv9u:7Rk6nYrEq2oQDleeS
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 195KB

file.exe

IMPHASH dd0586f5c5e46eff877624b05b375878
SHA256 849d6739e15eb62ff2b3fd09564f08321c3f5d14f2aada829a9b23e603e99bd0
MD5 b12349c4e286ed6d47ae911d49ea4db3
SHA1 ae40dfda0368d4693b3d536e51339eb28f4a7a22
SHA512 e318d8c3d088b084e68db87c87e0250c6d10c9f27139fc9d51c2bc772a8e92b674f289d3fe375843096bc5fa95a20e41680bff662ff18f78cdc6a6e16ac1a425
SSDEEP 6144:7RkObQHQnYr1GT5CTBMoN/mZFlCYMPeUv9u:7Rk6nYrEq2oQDleeS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34707

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryA FindFirstVolumeMountPointW CreateDirectoryExA LocalFlags WaitForSingleObject WriteConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcessId OpenEventW CreateFileMappingW GetLocaleInfoA GetProcAddress LocalAlloc ChangeTimerQueueTimer GetConsoleTitleW CopyFileA GetLongPathNameW SetPriorityClass GetLastError GetProfileSectionW WriteProfileStringA GetConsoleAliasA WritePrivateProfileSectionA GetConsoleAliasesLengthA FindResourceW SetVolumeMountPointA HeapAlloc GetComputerNameW CreateNamedPipeW EnumResourceLanguagesW TransactNamedPipe _hwrite EnumDateFormatsA ZombifyActCtx DeleteVolumeMountPointW GetModuleHandleA AddRefActCtx WritePrivateProfileStringA GetSystemDirectoryA FindNextFileW SetSystemPowerState GetLongPathNameA EnumCalendarInfoW SetLastError SetCriticalSectionSpinCount CloseHandle WriteConsoleW RaiseException RtlUnwind HeapFree DeleteFileA MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW HeapReAlloc CreateFileW

user32

GetMenuBarInfo

Sharing