file[.]exe | Triage™

General

Target
file.exe
Size 245KB
Sample230316-pv7tlsda9v
SHA256 c680866af40f12d71ea30dbc0ba4d02132b64cff08305df0f0827aed7fe99dd1
MD5 354b3a49c2eb26b415dad675be798021
SHA1 ab564aa0f4b8c1bb4840e5d53cf22bda139a8417
SHA512 0e7d8fd3dbfddae84f794630f71cd5e08ca82d08047ac04fdd754521e5ea42a326967da61b3c85762fcead5eeaa9c73ba60f073611379dd788ce6909652602c4
SSDEEP 6144:bYJs4DXb74q3uYqTKRPRdqZThdIQJeyG:bYiw8guYq2Xahdxe
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 245KB

file.exe

IMPHASH 1721309e32c361be0bb58c665aa73d12
SHA256 c680866af40f12d71ea30dbc0ba4d02132b64cff08305df0f0827aed7fe99dd1
MD5 354b3a49c2eb26b415dad675be798021
SHA1 ab564aa0f4b8c1bb4840e5d53cf22bda139a8417
SHA512 0e7d8fd3dbfddae84f794630f71cd5e08ca82d08047ac04fdd754521e5ea42a326967da61b3c85762fcead5eeaa9c73ba60f073611379dd788ce6909652602c4
SSDEEP 6144:bYJs4DXb74q3uYqTKRPRdqZThdIQJeyG:bYiw8guYq2Xahdxe
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12145

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoW GetConsoleAliasA SetDefaultCommConfigW InterlockedCompareExchange SleepEx GetWindowsDirectoryA EnumTimeFormatsW GlobalAlloc GetSystemDirectoryW AddRefActCtx GetFirmwareEnvironmentVariableA LoadLibraryW TerminateThread CopyFileW ReadFileScatter CreateEventA LeaveCriticalSection GetFileAttributesW WritePrivateProfileSectionW GlobalUnlock _llseek SetLastError GetProcAddress OpenWaitableTimerA SetCalendarInfoW FindFirstVolumeMountPointW GlobalGetAtomNameW AddAtomA EnumResourceTypesW GetModuleHandleA FindNextFileW GetConsoleCursorInfo GetShortPathNameW GetCPInfoExA ReadConsoleInputW LocalSize EnumCalendarInfoExA LocalFree lstrcmpA CopyFileExW RaiseException PulseEvent GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

gdi32

GetTextFaceA

advapi32

LookupAccountSidW

Sharing