file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample230214-rwallsde2s
SHA256 0e5bde66286ce0ae6c182e93aebde1f2bdaeb6c250bd0fc52dcf9952ce234d91
MD5 6962ed9bcafa1728abb1bfd64ace7891
SHA1 227e00d6f6476696c665167e6230bec7ec17c792
SHA512 b36e260655facee050125c8b50e6333aa7f6f2492beb69636622886c87de991f54be78a17b83a6afeb4f83ad2be7472d6e67fb999dd7ae1570f60fa3101a2cb6
SSDEEP 6144:5ibLMHnCgeJJe2SFGVSro9iMEWQuQIrDJ45LvAmJijRC8d3+Sk:5ibOnJeTGI9iMALA1Ld3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH 17104dba2e0e802750207f94b99930de
SHA256 0e5bde66286ce0ae6c182e93aebde1f2bdaeb6c250bd0fc52dcf9952ce234d91
MD5 6962ed9bcafa1728abb1bfd64ace7891
SHA1 227e00d6f6476696c665167e6230bec7ec17c792
SHA512 b36e260655facee050125c8b50e6333aa7f6f2492beb69636622886c87de991f54be78a17b83a6afeb4f83ad2be7472d6e67fb999dd7ae1570f60fa3101a2cb6
SSDEEP 6144:5ibLMHnCgeJJe2SFGVSro9iMEWQuQIrDJ45LvAmJijRC8d3+Sk:5ibOnJeTGI9iMALA1Ld3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19161

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA MoveFileWithProgressA GetModuleHandleW GetTickCount GetCommConfig GetCurrentThread GetGeoInfoW GlobalAlloc GetSystemDirectoryW ReadConsoleInputA CreateEventA DeleteVolumeMountPointW GetBinaryTypeA GetMailslotInfo CreateActCtxA LCMapStringA GetStartupInfoA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc DisableThreadLibraryCalls LoadLibraryA SetMailslotInfo UnhandledExceptionFilter GetProcessWorkingSetSize GetNumberFormatW RemoveDirectoryW FindFirstChangeNotificationA HeapSetInformation GetConsoleTitleW RequestWakeupLatency GetVersionExA FileTimeToLocalFileTime GetCurrentProcessId GetTempPathA CopyFileExA GetLocaleInfoA InterlockedIncrement ProcessIdToSessionId FillConsoleOutputCharacterA GetStringTypeW GetStringTypeA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte MultiByteToWideChar LCMapStringW

user32

GetKeyNameTextW RealChildWindowFromPoint IsChild RealGetWindowClassA LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

LogonUserW IsValidAcl ReportEventA

ole32

CoRegisterMallocSpy

Sharing