file[.]exe | Triage™

General

Target
file.exe
Size 360KB
Sample230322-xd26ssce8t
SHA256 d6b06f7b07cd71f55091d9d1c36556538dfe3fd8cd3b40bccd29d6ea123fb334
MD5 39301482aa35c5dad8e6fab842109cca
SHA1 917092a21b22f6e11f932b176e93b536e84a4130
SHA512 eb97b3993f034da0346bccc15b604e716ac730ebadfcc4a92b292853d7c03afd650671c647f815bae19527027b7814669c0cdf1874c3a12d4fc652b37ddb4b4a
SSDEEP 3072:KXsF7PoVHsPM2jXO2N1BDeZ7fGIKhggw4m8qPjGDe53RUoV:GMq2v+TGZgu+yDe53q
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 360KB

file.exe

IMPHASH 05d87b5aa905cc75972feaf183240d59
SHA256 d6b06f7b07cd71f55091d9d1c36556538dfe3fd8cd3b40bccd29d6ea123fb334
MD5 39301482aa35c5dad8e6fab842109cca
SHA1 917092a21b22f6e11f932b176e93b536e84a4130
SHA512 eb97b3993f034da0346bccc15b604e716ac730ebadfcc4a92b292853d7c03afd650671c647f815bae19527027b7814669c0cdf1874c3a12d4fc652b37ddb4b4a
SSDEEP 3072:KXsF7PoVHsPM2jXO2N1BDeZ7fGIKhggw4m8qPjGDe53RUoV:GMq2v+TGZgu+yDe53q
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16711

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA GlobalCompact _llseek VerSetConditionMask GetConsoleAliasA WritePrivateProfileSectionA SetDefaultCommConfigW InterlockedCompareExchange WriteConsoleInputA BackupSeek GetModuleHandleW EnumCalendarInfoExW EnumTimeFormatsA EnumResourceTypesA ActivateActCtx GlobalAlloc LoadLibraryW TerminateThread ReadConsoleInputA GetSystemWindowsDirectoryA GetFileAttributesA IsDBCSLeadByte lstrcmpW GlobalUnlock FindFirstFileA SetLastError GetProcAddress GetFirmwareEnvironmentVariableW EnterCriticalSection ResetEvent OpenWaitableTimerA GetProcessId LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW SetCurrentDirectoryW GlobalGetAtomNameW AddAtomA WaitForMultipleObjects FindNextFileA FindFirstVolumeMountPointA FreeEnvironmentStringsW GetCPInfoExA DeleteFileW CopyFileExA CloseHandle HeapSize GetLastError WideCharToMultiByte DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW FatalAppExitA HeapFree Sleep IsProcessorFeaturePresent GetLocaleInfoW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetConsoleCtrlHandler FreeLibrary InterlockedExchange HeapAlloc HeapReAlloc WriteConsoleW CreateFileW

user32

LoadMenuW

Sharing