file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample230309-2m8gdsaf27
SHA256 75a4ef7fe472ec8e185eaf1b8af2a5d42557fa0ea067d08ff15b1774b48fa38f
MD5 a6f62cca92f096f27eae9ab4f014c023
SHA1 fbd7b9fb7f72160b374592f93ccc606534fc8b31
SHA512 30c9f57066bdd28e1a7df57cc4f52374f5ea1989070d4368da2c29e55b920fa19dce180009ffcf8d0c099f89a3106dd1c2fc744634eabeb7b093a862a2c6e1c5
SSDEEP 3072:wmIdVULamO1KA5Y/oG09AISHMlOhFiMWlkRIjOIt49RWsCh6ha7sprmu1:wCL44A5K091qvlIjRwWsCYIYV
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH 573b4b7efb3441aeba723c69e52e8c67
SHA256 75a4ef7fe472ec8e185eaf1b8af2a5d42557fa0ea067d08ff15b1774b48fa38f
MD5 a6f62cca92f096f27eae9ab4f014c023
SHA1 fbd7b9fb7f72160b374592f93ccc606534fc8b31
SHA512 30c9f57066bdd28e1a7df57cc4f52374f5ea1989070d4368da2c29e55b920fa19dce180009ffcf8d0c099f89a3106dd1c2fc744634eabeb7b093a862a2c6e1c5
SSDEEP 3072:wmIdVULamO1KA5Y/oG09AISHMlOhFiMWlkRIjOIt49RWsCh6ha7sprmu1:wCL44A5K091qvlIjRwWsCYIYV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CallNamedPipeA GlobalAddAtomA InterlockedIncrement VerSetConditionMask OpenJobObjectA FindCloseChangeNotification GetModuleHandleW GetConsoleAliasesA FindResourceExA GlobalAlloc SetCommConfig GetConsoleAliasExesLengthW FormatMessageW GetFileAttributesA lstrcpynW WriteConsoleW GetBinaryTypeA MultiByteToWideChar GetStringTypeExA SetLastError GetProcAddress VirtualAlloc LoadLibraryA GetFileType WriteProfileSectionW FindAtomA FoldStringA EnumDateFormatsA CancelTimerQueueTimer FreeEnvironmentStringsW GetStringTypeW GetWindowsDirectoryW GlobalReAlloc LCMapStringW EnumSystemLocalesA GetDateFormatW GetStartupInfoW HeapAlloc GetLastError HeapFree SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleHandleA LCMapStringA WideCharToMultiByte GetStringTypeA GetLocaleInfoA HeapSize

user32

RegisterClassW ValidateRect GetMenuInfo

gdi32

GetGlyphIndicesA

Sharing