file[.]exe | Triage™

General

Target
file.exe
Size 361KB
Sample230306-sbkrhsch58
SHA256 08f8032cf853b669a798b2ba1a6d69abea1e60fb1c758281abb6c81635017740
MD5 1c625dcc6ff9441dd7f64cd0fdf8d274
SHA1 3e5d764568c4e646c707192bc432345e47580032
SHA512 85928bd5dfa323c75d6f420f454f4e8a9d7c9e2871502f8d0b10d713f977551b4161cc2f8e08aa6e903b70f625acb323f5069aa19c7aaf8dd13820f877ab3a80
SSDEEP 6144:Q3MuLzwEckNRoNpYCcAsqjXKhk/eG7LJsI6UW:yPwEcdrbbsKXleGPJsI6
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 361KB

file.exe

IMPHASH 0309f345269cd9af3b42f8f4aa807e76
SHA256 08f8032cf853b669a798b2ba1a6d69abea1e60fb1c758281abb6c81635017740
MD5 1c625dcc6ff9441dd7f64cd0fdf8d274
SHA1 3e5d764568c4e646c707192bc432345e47580032
SHA512 85928bd5dfa323c75d6f420f454f4e8a9d7c9e2871502f8d0b10d713f977551b4161cc2f8e08aa6e903b70f625acb323f5069aa19c7aaf8dd13820f877ab3a80
SSDEEP 6144:Q3MuLzwEckNRoNpYCcAsqjXKhk/eG7LJsI6UW:yPwEcdrbbsKXleGPJsI6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27797

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement VerSetConditionMask OpenJobObjectA UnlockFile CallNamedPipeW GetModuleHandleW GetWindowsDirectoryA GetDateFormatA SetHandleCount FindResourceExA GetCalendarInfoW GetConsoleAliasExesLengthW FormatMessageW GetStringTypeExW lstrcpynW GetConsoleAliasW GetFileAttributesW WriteConsoleW GetBinaryTypeW EnumSystemLocalesA GetConsoleAliasesW SetLastError GlobalAddAtomA VirtualAlloc LoadLibraryA LocalAlloc GetFileType WriteProfileSectionW FindAtomA FoldStringW EnumDateFormatsA GetModuleHandleA FreeEnvironmentStringsW GetStringTypeW OpenEventW GlobalReAlloc LCMapStringW GetConsoleOutputCP WriteConsoleA GetProcAddress InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree RtlUnwind RaiseException HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar WideCharToMultiByte CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount LCMapStringA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle SetEndOfFile GetProcessHeap ReadFile

user32

InvalidateRgn CreateAcceleratorTableW LoadMenuW LoadMenuA

gdi32

GetGlyphIndicesW

Sharing