file[.]exe | Triage™

General

Target
file.exe
Size 250KB
Sample230227-ty883aee87
SHA256 b552cc179a2eed96fb9c0e315459707f0af0fc96cbe20fc37904456fbd51f771
MD5 bc3c5eb7c5f4f7e29ef67c8d6d68a4f3
SHA1 8ba63c80c4cfef36bbcd695d7aedee2cf35f632f
SHA512 502c4578d581222d4b7f3d1b4895180236a97d06686b0e3323b3efebfe101869bc1bb6d07e23cf8450a07a77a899cd3509466af962cfd3859280e52dd8af2254
SSDEEP 6144:BqxIwj6MFCcL56nZquh2P9w1rARGYDsFrm:BqxIYFCccJheWARMF
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 250KB

file.exe

IMPHASH c702649e211ff4e9af2e81908e0fc8b8
SHA256 b552cc179a2eed96fb9c0e315459707f0af0fc96cbe20fc37904456fbd51f771
MD5 bc3c5eb7c5f4f7e29ef67c8d6d68a4f3
SHA1 8ba63c80c4cfef36bbcd695d7aedee2cf35f632f
SHA512 502c4578d581222d4b7f3d1b4895180236a97d06686b0e3323b3efebfe101869bc1bb6d07e23cf8450a07a77a899cd3509466af962cfd3859280e52dd8af2254
SSDEEP 6144:BqxIwj6MFCcL56nZquh2P9w1rARGYDsFrm:BqxIYFCccJheWARMF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24412

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleInputA GetWindowsDirectoryW FindFirstVolumeMountPointW FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputA VerifyVersionInfoW GetCPInfoExA OpenEventA SetLocaleInfoW GetProcAddress LocalAlloc DeleteFileA EnumResourceTypesW GetLongPathNameW LoadLibraryW GetBinaryTypeW SetLastError LocalShrink WriteProfileStringW GetComputerNameExA GetConsoleAliasA WriteProfileSectionA GetSystemPowerStatus SetVolumeMountPointA GetModuleHandleW EnumResourceLanguagesA SetDefaultCommConfigA EnumDateFormatsW AddRefActCtx SetVolumeMountPointW GetStartupInfoA CreateJobSet WritePrivateProfileStringW GetStringTypeW GetShortPathNameW FindNextFileW EnumCalendarInfoA ReleaseActCtx GetLastError HeapSize WriteConsoleW RaiseException MultiByteToWideChar WideCharToMultiByte HeapReAlloc HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapCreate HeapAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind CreateFileW

user32

LoadMenuW

shell32

FindExecutableA

Sharing