file[.]exe | Triage™

General

Target
file.exe
Size 248KB
Sample230323-dfk6hsdb75
SHA256 c8914f248385ff7eadb10ce1429e014d6fa8d2b85dc6eb55bd7e7da4eee42d3e
MD5 32d38efb3beb3a1cb63b572bf9c43076
SHA1 635e29559e6652be6fb65ac3c656f2722cb15db6
SHA512 33c8a553139d0cc1cd55268d3bc793001fa7f9269a49c7dd8d1bf1bc8c0751c8565ffdb09854fcd647c1d0fde27f89a033357f6182ed9f76583e0ddcec89fb76
SSDEEP 3072:tHQQqSOWvDv4di4NEhunCVUTypQ/FjogjY91vOL4gW1riy+yQ9ruMk+Ma:qRUDGfNLqUnSJFrxQAbn
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 248KB

file.exe

IMPHASH 0c7d5e3cc418522bc761bfea9cf074f4
SHA256 c8914f248385ff7eadb10ce1429e014d6fa8d2b85dc6eb55bd7e7da4eee42d3e
MD5 32d38efb3beb3a1cb63b572bf9c43076
SHA1 635e29559e6652be6fb65ac3c656f2722cb15db6
SHA512 33c8a553139d0cc1cd55268d3bc793001fa7f9269a49c7dd8d1bf1bc8c0751c8565ffdb09854fcd647c1d0fde27f89a033357f6182ed9f76583e0ddcec89fb76
SSDEEP 3072:tHQQqSOWvDv4di4NEhunCVUTypQ/FjogjY91vOL4gW1riy+yQ9ruMk+Ma:qRUDGfNLqUnSJFrxQAbn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16994

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileSectionNamesW SetDefaultCommConfigA CreateMutexW EnumCalendarInfoA GetStringTypeA GlobalCompact _llseek VerSetConditionMask GetConsoleAliasA WritePrivateProfileSectionA WriteConsoleInputA BackupSeek GetModuleHandleW EnumTimeFormatsW GlobalAlloc LoadLibraryW TerminateThread ReadConsoleInputA GetSystemWindowsDirectoryA GetFileAttributesA TransactNamedPipe IsDBCSLeadByte lstrcmpW GlobalUnlock DeactivateActCtx FindFirstFileA SetLastError GetProcAddress GetFirmwareEnvironmentVariableW EnterCriticalSection GlobalGetAtomNameA SearchPathA ResetEvent OpenWaitableTimerA GetProcessId LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW SetCurrentDirectoryW AddAtomA WaitForMultipleObjects EnumResourceTypesW FindNextFileA FreeEnvironmentStringsW GetCPInfoExA DeleteFileW EnumCalendarInfoExA CopyFileExA CloseHandle WriteConsoleW GetLastError WideCharToMultiByte HeapAlloc DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy LeaveCriticalSection SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetModuleFileNameA GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW FatalAppExitA HeapFree Sleep IsProcessorFeaturePresent GetLocaleInfoW SetConsoleCtrlHandler FreeLibrary InterlockedExchange SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc HeapSize CreateFileW

user32

LoadMenuW

Sharing