file[.]exe | Triage™

General

Target
file.exe
Size 330KB
Sample230309-2586msaf86
SHA256 e2279ce8c31ce3ff250d0942cbfd52a3ec6b04437e8ee7facf8c4f68a131328d
MD5 2a18774f6e9cfb896bce930f24ff0402
SHA1 3678c97cc3d8bec04670494fb80bf80fc906f30d
SHA512 a8e210e3a617badc7a8e2dd97d03e31ac1d51d47c4979cf86bd625ed1073e044a50b91758d606b1518c24da8302a2c98b50ca9dd0068bda4dd2b31d4a318e010
SSDEEP 6144:YILU3r5Kw0ysBrQt/kD+yUuKomudSX4LCIV:fg3rr0Z4MqyUluQi
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 330KB

file.exe

IMPHASH 573b4b7efb3441aeba723c69e52e8c67
SHA256 e2279ce8c31ce3ff250d0942cbfd52a3ec6b04437e8ee7facf8c4f68a131328d
MD5 2a18774f6e9cfb896bce930f24ff0402
SHA1 3678c97cc3d8bec04670494fb80bf80fc906f30d
SHA512 a8e210e3a617badc7a8e2dd97d03e31ac1d51d47c4979cf86bd625ed1073e044a50b91758d606b1518c24da8302a2c98b50ca9dd0068bda4dd2b31d4a318e010
SSDEEP 6144:YILU3r5Kw0ysBrQt/kD+yUuKomudSX4LCIV:fg3rr0Z4MqyUluQi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CallNamedPipeA GlobalAddAtomA InterlockedIncrement VerSetConditionMask OpenJobObjectA FindCloseChangeNotification GetModuleHandleW GetConsoleAliasesA FindResourceExA GlobalAlloc SetCommConfig GetConsoleAliasExesLengthW FormatMessageW GetFileAttributesA lstrcpynW WriteConsoleW GetBinaryTypeA MultiByteToWideChar GetStringTypeExA SetLastError GetProcAddress VirtualAlloc LoadLibraryA GetFileType WriteProfileSectionW FindAtomA FoldStringA EnumDateFormatsA CancelTimerQueueTimer FreeEnvironmentStringsW GetStringTypeW GetWindowsDirectoryW GlobalReAlloc LCMapStringW EnumSystemLocalesA GetDateFormatW GetStartupInfoW HeapAlloc GetLastError HeapFree SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleHandleA LCMapStringA WideCharToMultiByte GetStringTypeA GetLocaleInfoA HeapSize

user32

RegisterClassW ValidateRect GetMenuInfo

gdi32

GetGlyphIndicesA

Sharing