file[.]exe | Triage™

General

Target
file.exe
Size 193KB
Sample230215-eknmwaaa62
SHA256 40d2cd482d6d310775a88c5e72acb5a30586d89fa168c6ee34d2ef2f6374c28c
MD5 b218c148efae3bbc6dc324aff6ef0766
SHA1 6410c448b8293bf963e2a9d6a63ecd9778f35f13
SHA512 ad86239ca908818f751e76fd108f6c1fac8583839613aaf40b19a662c327dc69ccbf6621e0e5e456f88263ee7df60978a4975ec16aa6e1f2237c818af29b95b7
SSDEEP 3072:ARNIcbL7P21N5aeYBc217uj6WvVjDJ7iyyLbou61ll2R38:WLD21aNWuCjTv9B+on2R
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 193KB

file.exe

IMPHASH 4e0db68663e7214680ba4f7cafdd65a1
SHA256 40d2cd482d6d310775a88c5e72acb5a30586d89fa168c6ee34d2ef2f6374c28c
MD5 b218c148efae3bbc6dc324aff6ef0766
SHA1 6410c448b8293bf963e2a9d6a63ecd9778f35f13
SHA512 ad86239ca908818f751e76fd108f6c1fac8583839613aaf40b19a662c327dc69ccbf6621e0e5e456f88263ee7df60978a4975ec16aa6e1f2237c818af29b95b7
SSDEEP 3072:ARNIcbL7P21N5aeYBc217uj6WvVjDJ7iyyLbou61ll2R38:WLD21aNWuCjTv9B+on2R
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19720

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement SystemTimeToFileTime SetMailslotInfo GetFileAttributesExA MoveFileWithProgressA GetModuleHandleW GetTickCount GetCurrentThread SetFileShortNameW ReadConsoleInputA CreateEventA GetBinaryTypeA GetGeoInfoA GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetACP GetStartupInfoA GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc DisableThreadLibraryCalls LoadLibraryA DeleteVolumeMountPointA UnhandledExceptionFilter GetProcessWorkingSetSize LocalAlloc IsSystemResumeAutomatic GetNumberFormatW RemoveDirectoryW GetModuleHandleA FindFirstChangeNotificationA HeapSetInformation GetConsoleTitleW GetVersionExA GetVolumeNameForVolumeMountPointW GetCurrentProcessId GetTempPathA CopyFileExA InitializeCriticalSectionAndSpinCount HeapSize HeapReAlloc MapUserPhysicalPages FillConsoleOutputCharacterA GetNumaProcessorNode MultiByteToWideChar TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind GetCPInfo InterlockedDecrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapAlloc HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW LeaveCriticalSection EnterCriticalSection GetLocaleInfoA

user32

GetKeyNameTextW IsChild RealGetWindowClassA LoadMenuA CharUpperA CharLowerBuffW GetCursorInfo CharLowerBuffA ClipCursor

advapi32

LogonUserW ReportEventA IsValidAcl

ole32

CoRevokeMallocSpy

Sharing