file[.]exe | Triage™

General

Target
file.exe
Size 306KB
Sample230307-pwsfbaaa43
SHA256 b3c16003d613c90f1741bf5b9cf2f2ceb3eac08da27dacefd8162364838a3227
MD5 457bf3e5181bbddea129330b1cd81b78
SHA1 efa77c57e3c3349fda484f7b06b69ce0635a6f12
SHA512 ae54777c03913a3eb589754061439806a2b8704d6844b2c5352ae8e5e10b16e6e3cc09c1a4269d45ff8668a8a361584cc30f6170376e4360684ca317276883c2
SSDEEP 6144:5mLIg+4U0b0iYqEV1uz8+LyznLFOpUOF0ketYVMNb:5mB+L0sqEVQ8WyznLmB0kk2
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 306KB

file.exe

IMPHASH edad5341d4cd5645dbbd9128c7d92249
SHA256 b3c16003d613c90f1741bf5b9cf2f2ceb3eac08da27dacefd8162364838a3227
MD5 457bf3e5181bbddea129330b1cd81b78
SHA1 efa77c57e3c3349fda484f7b06b69ce0635a6f12
SHA512 ae54777c03913a3eb589754061439806a2b8704d6844b2c5352ae8e5e10b16e6e3cc09c1a4269d45ff8668a8a361584cc30f6170376e4360684ca317276883c2
SSDEEP 6144:5mLIg+4U0b0iYqEV1uz8+LyznLFOpUOF0ketYVMNb:5mB+L0sqEVQ8WyznLmB0kk2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18551

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW CallNamedPipeA InterlockedIncrement VerSetConditionMask UnlockFile FreeEnvironmentStringsA GetModuleHandleW GetCommConfig GetWindowsDirectoryA SetHandleCount GetConsoleAliasExesLengthW FormatMessageW GetStringTypeExW lstrcpynW GetFileAttributesW WriteConsoleW GetBinaryTypeA IsDBCSLeadByte GetConsoleAliasesW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA LoadLibraryA LocalAlloc GetFileType OpenJobObjectW FindAtomA FoldStringW FoldStringA EnumDateFormatsA GetStringTypeW OpenEventW GlobalAddAtomW GlobalReAlloc EnumSystemLocalesW LCMapStringW CreateFileA SetStdHandle GetConsoleOutputCP GetDateFormatW GetStartupInfoW EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc GetModuleHandleA LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize CloseHandle WriteConsoleA

user32

LoadMenuW RegisterClassW ValidateRect GetIconInfo

gdi32

GetGlyphIndicesW

Sharing