file[.]exe | Triage™

General

Target
file.exe
Size 196KB
Sample230215-j15csaae7x
SHA256 bee2b04bf43e5cbce0db2179cfbcdf6a76d2fd893b8d5804ba1da75884fa22ec
MD5 ed00b531cf8c994e7bfacde5d5377fea
SHA1 acebdc4538166861de77918ec3c076dde0482235
SHA512 be8dcf80e91b756a8a1db2d4226f44f6b744c8b239ebf3885b1934aa11c9b76274c856e8ba73ac6deda64d434d98c25b849a75e53c0f829afadeeb59007904ab
SSDEEP 3072:BS36Oe8Lh7Kuz1RkzDwmHjLgUesPL3iYvqxkrwLtzDTixVN:BS6heh7KuArv1RNatLtzDT
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 196KB

file.exe

IMPHASH c612cc8734184ca2b57808b507ae7907
SHA256 bee2b04bf43e5cbce0db2179cfbcdf6a76d2fd893b8d5804ba1da75884fa22ec
MD5 ed00b531cf8c994e7bfacde5d5377fea
SHA1 acebdc4538166861de77918ec3c076dde0482235
SHA512 be8dcf80e91b756a8a1db2d4226f44f6b744c8b239ebf3885b1934aa11c9b76274c856e8ba73ac6deda64d434d98c25b849a75e53c0f829afadeeb59007904ab
SSDEEP 3072:BS36Oe8Lh7Kuz1RkzDwmHjLgUesPL3iYvqxkrwLtzDTixVN:BS6heh7KuArv1RNatLtzDT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34507

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateFileA FindActCtxSectionStringA WriteConsoleInputW GetCPInfoExA GetWindowsDirectoryA FindFirstVolumeMountPointW CreateDirectoryExW LocalFlags WaitForSingleObject WriteConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcessId OpenEventW CreateFileMappingW GetLocaleInfoA GetProcAddress LoadLibraryA LocalAlloc ChangeTimerQueueTimer GetConsoleTitleW CopyFileA FindResourceW SetPriorityClass SetLastError GetProfileSectionA WriteProfileStringA GetConsoleAliasA WritePrivateProfileSectionA GetConsoleAliasesLengthA FindResourceA SetVolumeMountPointA GetModuleHandleW HeapAlloc GetThreadLocale CreateNamedPipeW EnumResourceLanguagesA TransactNamedPipe _hwrite EnumDateFormatsA DeleteVolumeMountPointW AddRefActCtx WritePrivateProfileStringA GetSystemDirectoryA GetStringTypeW GetLongPathNameA FindNextFileW EnumCalendarInfoW ZombifyActCtx SetCriticalSectionSpinCount CloseHandle WriteConsoleW HeapReAlloc RaiseException RtlUnwind GetLastError HeapFree DeleteFileA MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer IsProcessorFeaturePresent DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep HeapSize WideCharToMultiByte LCMapStringW MultiByteToWideChar SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW CreateFileW

user32

GetMessageTime GetMenuBarInfo

Sharing