file[.]exe | Triage™

General

Target
file.exe
Size 250KB
Sample230323-tk74vagg38
SHA256 2460b900e7cca5a66f1d84ba794d0a471496165b3225e9e7a9acf6ee1ec8e887
MD5 efa38b382d4573acf04a35d0add913bd
SHA1 95f164e9809d34d9d0b95ed2d26932762f18c52e
SHA512 f83b575e594384aa513cd1d8c15e74a66b9df873c751a2c749349888059b4e63fc0935427b3bbba27b2aef917fc7d5c177a5fba65ec966c6a30f30388e8d4f4b
SSDEEP 3072:jUfGVdpcaV0LkN5iSx3ffSOp8Ij39aNKwycwt+otwk3mnLPzJ5Rupot:acV0L6Ew3zp/9NVcEtkLR4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 250KB

file.exe

IMPHASH 82f9a3111ed4dfd5fb803f88f46422ca
SHA256 2460b900e7cca5a66f1d84ba794d0a471496165b3225e9e7a9acf6ee1ec8e887
MD5 efa38b382d4573acf04a35d0add913bd
SHA1 95f164e9809d34d9d0b95ed2d26932762f18c52e
SHA512 f83b575e594384aa513cd1d8c15e74a66b9df873c751a2c749349888059b4e63fc0935427b3bbba27b2aef917fc7d5c177a5fba65ec966c6a30f30388e8d4f4b
SSDEEP 3072:jUfGVdpcaV0LkN5iSx3ffSOp8Ij39aNKwycwt+otwk3mnLPzJ5Rupot:acV0L6Ew3zp/9NVcEtkLR4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34297

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA GetLogicalDriveStringsW GlobalSize CreateHardLinkA WaitForSingleObjectEx FreeEnvironmentStringsA ReadConsoleW EnumResourceTypesA SetHandleCount FindResourceExA LoadLibraryW GetConsoleMode InterlockedPopEntrySList GetStringTypeExW DnsHostnameToComputerNameW lstrcpynW GetWriteWatch GetFileAttributesW WriteConsoleW GetModuleFileNameW GetCompressedFileSizeA CreateActCtxA IsBadStringPtrA WritePrivateProfileStringW GetShortPathNameA GetConsoleAliasesW GetStdHandle SetLastError GetCommState VirtualAlloc BeginUpdateResourceW EnumSystemCodePagesW CreateMemoryResourceNotification LoadLibraryA LocalAlloc AddAtomW WriteProfileSectionW FoldStringA GetModuleHandleA GetCommTimeouts GetConsoleTitleW QueryPerformanceFrequency DeleteTimerQueueTimer DebugBreak ReadConsoleOutputCharacterW EnumCalendarInfoExA DeleteFileA FlushFileBuffers CloseHandle CreateFileA GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoW GetConsoleCP GetConsoleAliasExesLengthA GetNumaProcessorNode SearchPathW FindVolumeClose GetProcAddress SetDefaultCommConfigA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer

user32

ToAsciiEx LoadBitmapA LoadMenuA IsWindowEnabled MessageBoxIndirectA DrawEdge GetScrollInfo GetWindowLongW GetKeyNameTextW ModifyMenuA

gdi32

GetCharABCWidthsA CreateDiscardableBitmap GetCharWidthI

advapi32

GetEventLogInformation SetKernelObjectSecurity

Sharing