file[.]exe | Triage™

General

Target
file.exe
Size 1.2MB
Sample230222-lr7snaaf75
SHA256 9cdc6ae5d9f78e681f5c37922d8198d47750456c977b53176acc7b638ef0396f
MD5 993ec50b58a0c91fee3e6f95ec8aca46
SHA1 01ae82a87c80c319662c1e7c5959d905fe24e4d9
SHA512 a90fc9dbc898898d51e3eef4784fe1869af6a5adaf06ce36d113202aa6cc53e947fa46486932b22d3ff554b77b4876a760799a83e7df710381a7b33c099020c4
SSDEEP 6144:iRj6GGsmqPbL6pGyjfHI/AO4KDuWqNlJFjq/AseKH:iRj6GG+Pp+K0lJFq/AsHH
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 1.2MB

file.exe

IMPHASH ef2a5385d81720e77693d85ac42793fa
SHA256 9cdc6ae5d9f78e681f5c37922d8198d47750456c977b53176acc7b638ef0396f
MD5 993ec50b58a0c91fee3e6f95ec8aca46
SHA1 01ae82a87c80c319662c1e7c5959d905fe24e4d9
SHA512 a90fc9dbc898898d51e3eef4784fe1869af6a5adaf06ce36d113202aa6cc53e947fa46486932b22d3ff554b77b4876a760799a83e7df710381a7b33c099020c4
SSDEEP 6144:iRj6GGsmqPbL6pGyjfHI/AO4KDuWqNlJFjq/AseKH:iRj6GG+Pp+K0lJFq/AsHH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26553

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetDlgItem

kernel32

GetStdHandle CreateFileW GetModuleHandleW MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW HeapSize RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW WriteConsoleW WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap ReadConsoleW

Sharing