file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample230325-2xte8aef59
SHA256 6b7bb7ed7e486cdc4e3a1d67a598aeee5a74e3c58f94e48e5fa626d6562f8688
MD5 1206d408c9c22639d99d6ce5c920999c
SHA1 e7aa3be99e1d1787d4bcd58a97c912b362e33c43
SHA512 aad73c5bd46a69768c1281f2d03a4d03484cb79a6e07f3d7f26edabc5c7fcef594d4b67fb11ed28f8859827b5ec9785126bf56c2dca8e4915c3f5e1c35cac33f
SSDEEP 6144:ITG53HXaagTpCNXzDGPD6jls1vsOMTfz:ITGtXfgTUN3YwuKz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH 5bf64f0a1a526a4cdb08b53a545d3838
SHA256 6b7bb7ed7e486cdc4e3a1d67a598aeee5a74e3c58f94e48e5fa626d6562f8688
MD5 1206d408c9c22639d99d6ce5c920999c
SHA1 e7aa3be99e1d1787d4bcd58a97c912b362e33c43
SHA512 aad73c5bd46a69768c1281f2d03a4d03484cb79a6e07f3d7f26edabc5c7fcef594d4b67fb11ed28f8859827b5ec9785126bf56c2dca8e4915c3f5e1c35cac33f
SSDEEP 6144:ITG53HXaagTpCNXzDGPD6jls1vsOMTfz:ITGtXfgTUN3YwuKz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18066

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileSectionNamesW CreateMutexW SearchPathW EnumCalendarInfoA CopyFileExW _llseek VerSetConditionMask GetCurrentActCtx SetDefaultCommConfigW GetModuleHandleExW WaitForSingleObject WriteConsoleInputA SetEvent GetProcessPriorityBoost GetModuleHandleW EnumTimeFormatsW EnumResourceTypesA GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW TerminateProcess lstrcmpW GlobalUnlock OpenMutexW IsDBCSLeadByteEx SetLastError GetProcAddress GetComputerNameExW GetFirmwareEnvironmentVariableW OpenWaitableTimerW LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW AddAtomW SetCurrentDirectoryW AddAtomA FindNextFileA FreeEnvironmentStringsW FindNextFileW GetStringTypeW PeekConsoleInputA GetCurrentThreadId GetCPInfoExA SetCalendarInfoA GetWindowsDirectoryW EnumCalendarInfoExA GetConsoleSelectionInfo DeleteFileA SetStdHandle WriteConsoleW GetLastError WideCharToMultiByte MoveFileA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection HeapCreate HeapDestroy HeapFree HeapAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar FatalAppExitA Sleep GetLocaleInfoW RaiseException GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing