file[.]exe | Triage™

General

Target
file.exe
Size 261KB
Sample230307-pvmtfaaa32
SHA256 7d4ed405992f3e2bddb0e4401eb3a1c1306474e09ee3b680f006d5967d12756e
MD5 d928fd4d1871b145f8ac5e522cf4ee10
SHA1 e508d3cf0c2bca37c0ecb7a415c2fe7ac5e5f3d3
SHA512 c10bda22063354526ab630551ccf0403c0af7b9452965da992c1f140ea069d8d22cb01b88b478c0b71c6f53d00e974d05838f54bd66e3406dec8a3305811511c
SSDEEP 3072:qWYs2Lu3IRoHT/3fFG3mkUPWI0n/5JrpXGP3yE1HSx+fF8Py6m9k4PGVoDNb:94L/aL6JplE1ygfD9kKAMNb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 261KB

file.exe

IMPHASH edad5341d4cd5645dbbd9128c7d92249
SHA256 7d4ed405992f3e2bddb0e4401eb3a1c1306474e09ee3b680f006d5967d12756e
MD5 d928fd4d1871b145f8ac5e522cf4ee10
SHA1 e508d3cf0c2bca37c0ecb7a415c2fe7ac5e5f3d3
SHA512 c10bda22063354526ab630551ccf0403c0af7b9452965da992c1f140ea069d8d22cb01b88b478c0b71c6f53d00e974d05838f54bd66e3406dec8a3305811511c
SSDEEP 3072:qWYs2Lu3IRoHT/3fFG3mkUPWI0n/5JrpXGP3yE1HSx+fF8Py6m9k4PGVoDNb:94L/aL6JplE1ygfD9kKAMNb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18551

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW CallNamedPipeA InterlockedIncrement VerSetConditionMask UnlockFile FreeEnvironmentStringsA GetModuleHandleW GetCommConfig GetWindowsDirectoryA SetHandleCount GetConsoleAliasExesLengthW FormatMessageW GetStringTypeExW lstrcpynW GetFileAttributesW WriteConsoleW GetBinaryTypeA IsDBCSLeadByte GetConsoleAliasesW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA LoadLibraryA LocalAlloc GetFileType OpenJobObjectW FindAtomA FoldStringW FoldStringA EnumDateFormatsA GetStringTypeW OpenEventW GlobalAddAtomW GlobalReAlloc EnumSystemLocalesW LCMapStringW CreateFileA SetStdHandle GetConsoleOutputCP GetDateFormatW GetStartupInfoW EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc GetModuleHandleA LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize CloseHandle WriteConsoleA

user32

LoadMenuW RegisterClassW ValidateRect GetIconInfo

gdi32

GetGlyphIndicesW

Sharing