file[.]exe | Triage™

General

Target
file.exe
Size 367KB
Sample230328-qyjrmabc89
SHA256 1a8918b0d74af8c29d44cf08dc0c3bffc8be366c48e31fb1e567ae832e2d8d4a
MD5 395f1151b0c4cbacc5593d0ceb721e94
SHA1 c1ff9f4f989d6d3c16152fddf5a5ea6f991890a6
SHA512 28f19c335edfcce065526957c69eadccde100f47d4fa8e072763f0d787187be5405d59f3fb713b0c87e8614f0024abf7cdb0cdb4276a258b0fcc28cbe6100559
SSDEEP 6144:Y8Q+x+8XxGYQEy/1veaDUBS//phtDDTS:Y8Q+IYxGzJGW/NzS
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 367KB

file.exe

IMPHASH 57b2dce156c7f62e042880189e8dc326
SHA256 1a8918b0d74af8c29d44cf08dc0c3bffc8be366c48e31fb1e567ae832e2d8d4a
MD5 395f1151b0c4cbacc5593d0ceb721e94
SHA1 c1ff9f4f989d6d3c16152fddf5a5ea6f991890a6
SHA512 28f19c335edfcce065526957c69eadccde100f47d4fa8e072763f0d787187be5405d59f3fb713b0c87e8614f0024abf7cdb0cdb4276a258b0fcc28cbe6100559
SSDEEP 6144:Y8Q+x+8XxGYQEy/1veaDUBS//phtDDTS:Y8Q+IYxGzJGW/NzS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16441

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA CreateMutexW WriteConsoleInputW EnumDateFormatsExW CopyFileExW EnumCalendarInfoW VerSetConditionMask GetConsoleAliasA GetEnvironmentStringsW GetModuleHandleExW WaitForSingleObject SetEvent _lclose GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW EnumResourceTypesA GlobalAlloc LoadLibraryW GetComputerNameExA SetMessageWaitingIndicator IsDBCSLeadByte lstrcmpW GetStdHandle SetLastError GetProcAddress GetFirmwareEnvironmentVariableW SearchPathA OpenMutexA OpenWaitableTimerW LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW SetConsoleOutputCP WriteProfileSectionW AddAtomA GetPrivateProfileSectionNamesA FindFirstVolumeMountPointA ContinueDebugEvent FindNextFileW GetStringTypeW FatalAppExitA GetCurrentThreadId GetWindowsDirectoryW DeleteFileW IsValidLocale EnumSystemLocalesA GetLastError HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate HeapDestroy HeapFree HeapAlloc ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA DeleteFileA

user32

LoadMenuA

Sharing