file[.]exe | Triage™

General

Target
file.exe
Size 295KB
Sample230328-pp2emsba36
SHA256 17dcd596f892d31a220fba0fa1752b2442397d4aaec547a672d36fb1e533293d
MD5 8e2aa331b5a83da49e8ad2a5ebfe16ef
SHA1 f660843b6bd05f25fe28ef6f8223a38d5e5d7527
SHA512 1abd604949e6e5a52de0b8ae18b3a0d7d59875b83fb7f7faef7719658c3d52a16706e0c199867929ed6cc290c0c8bc70758c2f4fa838129f0f6989e6b891658c
SSDEEP 3072:1l88VLE8LwYJejxRF3hh9Ion6xPVC2X3S8qas035phZO0mklmc2toiDTNg:P3ECrej93h0ZSO/6tDDTO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 295KB

file.exe

IMPHASH 53de2ae19717e07e1e428010dfb2faf2
SHA256 17dcd596f892d31a220fba0fa1752b2442397d4aaec547a672d36fb1e533293d
MD5 8e2aa331b5a83da49e8ad2a5ebfe16ef
SHA1 f660843b6bd05f25fe28ef6f8223a38d5e5d7527
SHA512 1abd604949e6e5a52de0b8ae18b3a0d7d59875b83fb7f7faef7719658c3d52a16706e0c199867929ed6cc290c0c8bc70758c2f4fa838129f0f6989e6b891658c
SSDEEP 3072:1l88VLE8LwYJejxRF3hh9Ion6xPVC2X3S8qas035phZO0mklmc2toiDTNg:P3ECrej93h0ZSO/6tDDTO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16436

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA CreateMutexW EnumCalendarInfoA WriteConsoleInputW EnumDateFormatsExW CopyFileExW VerSetConditionMask GetConsoleAliasA GetEnvironmentStringsW GetModuleHandleExW WaitForSingleObject SetEvent _lclose GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW EnumResourceTypesA GlobalAlloc GetFirmwareEnvironmentVariableA LoadLibraryW GetComputerNameExA SetMessageWaitingIndicator IsDBCSLeadByte lstrcmpW GetStdHandle SetLastError GetProcAddress SearchPathA OpenMutexA OpenWaitableTimerW LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW SetConsoleOutputCP WriteProfileSectionW AddAtomA GetPrivateProfileSectionNamesA FindFirstVolumeMountPointA ContinueDebugEvent FindNextFileW GetStringTypeW FatalAppExitA GetCurrentThreadId GetWindowsDirectoryW DeleteFileA EnumSystemLocalesA GetLocaleInfoA GetLastError MoveFileA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate HeapDestroy HeapFree HeapAlloc ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID IsValidLocale

user32

LoadMenuA

Sharing