file[.]exe | Triage™

General

Target
file.exe
Size 192KB
Sample230308-qv874sfa95
SHA256 6bac8bc88052d93f098734d3f213bfa0e5c7912a4b699dcce2a51a23a0abbcd6
MD5 c881ac87d4991219d60d44f220c8abb8
SHA1 7e0ea9a377ba227899faa3f2461407224fd5079f
SHA512 b306db7a1d7740c8631727521aecf75d575f2b04f2adada3f8126519e37dbd3cc757b9e567ddc26057021402afe25969d108900b3d8c226b77ef20ee1193fc56
SSDEEP 3072:cD8DnPm9Z17Edv1beJ47zIQPOdpAuPY2Srv9D+4W+F:nDnu9v7w1bvg8P2AvFfF
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 192KB

file.exe

IMPHASH 4f4daab76687771b70451dd07468ed63
SHA256 6bac8bc88052d93f098734d3f213bfa0e5c7912a4b699dcce2a51a23a0abbcd6
MD5 c881ac87d4991219d60d44f220c8abb8
SHA1 7e0ea9a377ba227899faa3f2461407224fd5079f
SHA512 b306db7a1d7740c8631727521aecf75d575f2b04f2adada3f8126519e37dbd3cc757b9e567ddc26057021402afe25969d108900b3d8c226b77ef20ee1193fc56
SSDEEP 3072:cD8DnPm9Z17Edv1beJ47zIQPOdpAuPY2Srv9D+4W+F:nDnu9v7w1bvg8P2AvFfF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17685

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetWindowsDirectoryA FindFirstVolumeMountPointA ReleaseMutex ReadConsoleInputW VerifyVersionInfoA GetCPInfoExA CreateEventA GetSystemDirectoryW GetProcAddress GetModuleHandleA LocalAlloc SetWaitableTimer DeleteFileA EnumResourceTypesA GetModuleHandleW SetThreadLocale WaitCommEvent GetComputerNameExA GetConsoleAliasA WriteProfileSectionA GetLastError WriteConsoleInputW AssignProcessToJobObject SetCalendarInfoW QueryInformationJobObject GetComputerNameA EnumTimeFormatsA AddAtomA SetSystemTime _llseek FindNextFileW FoldStringW GetShortPathNameA EnumCalendarInfoA EnumCalendarInfoExA GlobalAlloc CreateActCtxW GetConsoleCursorInfo CreateFileW ReadFile HeapSize WriteConsoleW FillConsoleOutputAttribute LoadLibraryW MultiByteToWideChar HeapReAlloc HeapAlloc MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte LCMapStringW GetStringTypeW Sleep SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind IsProcessorFeaturePresent CloseHandle

user32

GetListBoxInfo LoadMenuW GetMenuInfo

gdi32

GetCharWidth32A

Sharing