file[.]exe | Triage™

General

Target
file.exe
Size 276KB
Sample230325-cxevdsaf78
SHA256 df71c391aaeeb91c52ab31e5c82bffc9fb4f82ee4cce97928353bedbf3d62c13
MD5 4266e0a5d8c9530e3a4914a6bed18240
SHA1 e3182ae4939b09f3872e6373626e2fbf645951ab
SHA512 898e9fc1fd2cdbf1d307ce4dc737fe31d6fb71f8d116162fd65675ee85aabd1b5e40bd01b24fa20c3b40627a5f9ab0a4bdcbb5648aa74a50553a256d4672482e
SSDEEP 3072:2vof2U2+6ukNy9CzjJyn5oX9mqtK2X6boCphMHEN5jVYcQouafM/zi3WN8aeea:gMV8Soyn5aK2X6boCnhQNaa6va
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 276KB

file.exe

IMPHASH 30d15c7b3cce8f8931262599cc59559f
SHA256 df71c391aaeeb91c52ab31e5c82bffc9fb4f82ee4cce97928353bedbf3d62c13
MD5 4266e0a5d8c9530e3a4914a6bed18240
SHA1 e3182ae4939b09f3872e6373626e2fbf645951ab
SHA512 898e9fc1fd2cdbf1d307ce4dc737fe31d6fb71f8d116162fd65675ee85aabd1b5e40bd01b24fa20c3b40627a5f9ab0a4bdcbb5648aa74a50553a256d4672482e
SSDEEP 3072:2vof2U2+6ukNy9CzjJyn5oX9mqtK2X6boCphMHEN5jVYcQouafM/zi3WN8aeea:gMV8Soyn5aK2X6boCnhQNaa6va
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17852

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW CopyFileExW GetStringTypeA _llseek LocalCompact EnumCalendarInfoW VerSetConditionMask GetCurrentActCtx SetDefaultCommConfigW WaitForSingleObject WriteConsoleInputA SetEvent GetModuleHandleW EnumTimeFormatsW InitializeCriticalSection GlobalAlloc GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA GetConsoleAliasW WritePrivateProfileSectionW TerminateProcess lstrcmpW GlobalUnlock SetCurrentDirectoryA GetCPInfoExW OpenMutexW IsDBCSLeadByteEx SetLastError GetProcAddress PeekConsoleInputW SearchPathA OpenWaitableTimerW LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW AddAtomW GlobalGetAtomNameW AddAtomA EnumResourceTypesW GetPrivateProfileSectionNamesA FindNextFileA FreeEnvironmentStringsW FindNextFileW SetCalendarInfoA GetWindowsDirectoryW DeleteFileW GetCurrentProcessId EnumCalendarInfoExA SetStdHandle WriteConsoleW GetLastError MoveFileA HeapAlloc DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime RaiseException FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW LCMapStringW MultiByteToWideChar GetStringTypeW HeapFree Sleep GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale RtlUnwind HeapSize HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle CreateFileW

user32

LoadMenuW

Sharing