file[.]exe | Triage™

General

Target
file.exe
Size 1.9MB
Sample230313-r36bvsch4z
SHA256 a4099e49f7b95da7d3017635d34afbfcae9b556f2e3573c4c18fc4c3a891913d
MD5 50c8ba764864a27471c1e46ec947f944
SHA1 e8b13edb9d248a1449d200582e6fdbc6f4285afd
SHA512 592d0f73ed9f569b3ff856da1d988be39e61592e3dcc0663fc663cc20e315c34100e8caf35ee562173528f4b22910229176116b5b780845de4a3314485f52002
SSDEEP 49152:8TfU9QQZjg5VdTimqf0NSRwP2u3Ipn0ZA3H4fj4v1+Pid:eOQQZ0rdng0m8IpnQA3Y7T
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 1.9MB

file.exe

IMPHASH 7746e555be95e38121d2991a62c207a1
SHA256 a4099e49f7b95da7d3017635d34afbfcae9b556f2e3573c4c18fc4c3a891913d
MD5 50c8ba764864a27471c1e46ec947f944
SHA1 e8b13edb9d248a1449d200582e6fdbc6f4285afd
SHA512 592d0f73ed9f569b3ff856da1d988be39e61592e3dcc0663fc663cc20e315c34100e8caf35ee562173528f4b22910229176116b5b780845de4a3314485f52002
SSDEEP 49152:8TfU9QQZjg5VdTimqf0NSRwP2u3Ipn0ZA3H4fj4v1+Pid:eOQQZ0rdng0m8IpnQA3Y7T
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21886

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CallNamedPipeW GetCommConfig GetDateFormatA GetEnvironmentStrings GlobalAlloc LoadLibraryW CreateEventA GetConsoleAliasExesLengthW GetStringTypeExW lstrcpynW EnumSystemCodePagesA GetFileAttributesW VerifyVersionInfoA LocalReAlloc GetBinaryTypeA MultiByteToWideChar GetConsoleAliasesW SetLastError GetProcAddress VirtualAlloc OpenJobObjectA SetTimerQueueTimer WriteConsoleA InterlockedExchangeAdd GetFileType CreateHardLinkW WriteProfileSectionW FindNextChangeNotification FindAtomA FoldStringA FreeEnvironmentStringsW GetStringTypeW EnumDateFormatsW GetWindowsDirectoryW GlobalAddAtomW OpenFileMappingA LCMapStringW FindResourceExW GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetModuleHandleA LCMapStringA GetStringTypeA

user32

ValidateRect GetMenuInfo

gdi32

GetGlyphIndicesA CreateDCA

Sharing