file[.]exe | Triage™

General

Target
file.exe
Size 302KB
Sample230215-hbrvqaae78
SHA256 369a6601ad77214adb36d79e27c0b4a59c25b605bbfe0ccc08ae93293d577e33
MD5 e3170051f9dc69b77d55836724f6244d
SHA1 f1ebde91d0e52ebba05895578a0782e7fc6ad83d
SHA512 e3bc4dc6f9d0ace97fa5dd1ae1088088f440e4837988a68b4e901ac1260a829754844da0d68b1c724adaacb4629c03984494f588055e74579d5a725937cfff0b
SSDEEP 6144:L4buQ6MhKbawXOTm2zzF2d+QbsklvzwtnwP0QuaS9f:L4BhKbaMOTm5xbHlstDND9f
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 302KB

file.exe

IMPHASH c612cc8734184ca2b57808b507ae7907
SHA256 369a6601ad77214adb36d79e27c0b4a59c25b605bbfe0ccc08ae93293d577e33
MD5 e3170051f9dc69b77d55836724f6244d
SHA1 f1ebde91d0e52ebba05895578a0782e7fc6ad83d
SHA512 e3bc4dc6f9d0ace97fa5dd1ae1088088f440e4837988a68b4e901ac1260a829754844da0d68b1c724adaacb4629c03984494f588055e74579d5a725937cfff0b
SSDEEP 6144:L4buQ6MhKbawXOTm2zzF2d+QbsklvzwtnwP0QuaS9f:L4BhKbaMOTm5xbHlstDND9f
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34507

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryA FindFirstVolumeMountPointW CreateDirectoryExW LocalFlags WaitForSingleObject WriteConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcessId OpenEventW CreateFileMappingW GetLocaleInfoA GetProcAddress LoadLibraryA LocalAlloc ChangeTimerQueueTimer GetConsoleTitleW CopyFileA FindResourceW SetPriorityClass SetLastError GetProfileSectionA WriteProfileStringA GetConsoleAliasA WritePrivateProfileSectionA GetConsoleAliasesLengthA FindResourceA SetVolumeMountPointA GetModuleHandleW HeapAlloc GetThreadLocale CreateNamedPipeW EnumResourceLanguagesA TransactNamedPipe _hwrite EnumDateFormatsA DeleteVolumeMountPointW AddRefActCtx WritePrivateProfileStringA GetSystemDirectoryA GetStringTypeW GetLongPathNameA FindNextFileW EnumCalendarInfoW ZombifyActCtx SetCriticalSectionSpinCount CloseHandle WriteConsoleW HeapReAlloc RaiseException RtlUnwind GetLastError HeapFree DeleteFileA MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer IsProcessorFeaturePresent DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW CreateFileW

user32

GetMessageTime GetMenuBarInfo

Sharing