file[.]exe | Triage™

General

Target
file.exe
Size 189KB
Sample230215-vlt42sch79
SHA256 2c265e4069a993ec44021ed7750ca9bd7c1f43cdfac38a8c7bdd10ec5e2e320b
MD5 ab0afae150cd2cbfcc7cb1b27c7183ac
SHA1 044a9441bcac36d326c41da9b597bc55eae2ee21
SHA512 a63c792725691d261271a44360d06df2e6bda3e7e940cdca10499b451b4a6fc5d409e2ae33af952a30be312864ae2cb9d2b92889fdd86123facab46af27658f7
SSDEEP 3072:BCaAesTG/kT6o+0DYj3BsqtVuoBJnwSVpqxvvaDuTW:BbAe/kTZo3TtVuo/fWZva
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 189KB

file.exe

IMPHASH 39de7fa9d5db754ecbe7ddc0a550cc7e
SHA256 2c265e4069a993ec44021ed7750ca9bd7c1f43cdfac38a8c7bdd10ec5e2e320b
MD5 ab0afae150cd2cbfcc7cb1b27c7183ac
SHA1 044a9441bcac36d326c41da9b597bc55eae2ee21
SHA512 a63c792725691d261271a44360d06df2e6bda3e7e940cdca10499b451b4a6fc5d409e2ae33af952a30be312864ae2cb9d2b92889fdd86123facab46af27658f7
SSDEEP 3072:BCaAesTG/kT6o+0DYj3BsqtVuoBJnwSVpqxvvaDuTW:BbAe/kTZo3TtVuo/fWZva
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

33277

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateFileA FindActCtxSectionGuid WriteConsoleInputA GetCPInfoExW GetWindowsDirectoryA FindFirstVolumeMountPointA CreateDirectoryExW GlobalFlags WaitForSingleObject ReadConsoleInputW VerifyVersionInfoW GetVersionExA GetCurrentProcess OpenEventW CreateFileMappingA GetLocaleInfoA GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer GetConsoleTitleW CopyFileA FindResourceW SetPriorityClass SetLastError GetProfileSectionA WriteProfileStringW GetConsoleAliasA WritePrivateProfileSectionA GetConsoleAliasesLengthA FindResourceA SetVolumeMountPointW GetModuleHandleW HeapAlloc GetThreadLocale GetProcessId CreateNamedPipeW EnumResourceLanguagesA TransactNamedPipe _hwrite EnumDateFormatsW ActivateActCtx DeleteVolumeMountPointA AddRefActCtx WritePrivateProfileStringA GetSystemDirectoryA GetStringTypeW GetLongPathNameW EnumCalendarInfoW EnumCalendarInfoA FindNextFileW ReleaseActCtx SetCriticalSectionSpinCount CopyFileExA SetFilePointer WriteConsoleW RaiseException RtlUnwind GetLastError HeapFree DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer IsProcessorFeaturePresent DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess EnterCriticalSection LeaveCriticalSection HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep HeapSize SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW LCMapStringW MultiByteToWideChar HeapReAlloc CreateFileW

user32

GetMenuBarInfo GetMessageTime GetListBoxInfo

Sharing