file[.]exe | Triage™

General

Target
file.exe
Size 245KB
Sample230329-ll2pfsfg25
SHA256 12e76450eae37c96bc6ec0826ab19b375b66109d4b4e6d89beea5cd8d370d9c1
MD5 47d99b19db67e143cc9267529c9ba642
SHA1 7f880bee9f2e720c764c05f4006739a6b55f969b
SHA512 c759c51661350d4da25c4cfe2fb7af312a3e0da8bb0ed0d5cdc978eba883b7deccf3bb858a7d94b707732a0fa2df18edb0d8674202601f94be59e4812d66a45d
SSDEEP 3072:9IvZcg60rvLOi1J4OQ+Syf8RUnTmxrmDRZhuMZQmDVX5el/vzFQ8:9qZd/vLOVOQ4ka2rm/hu1mDmJv5
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 245KB

file.exe

IMPHASH 131680c2cabbac9aaecb70167d143fcd
SHA256 12e76450eae37c96bc6ec0826ab19b375b66109d4b4e6d89beea5cd8d370d9c1
MD5 47d99b19db67e143cc9267529c9ba642
SHA1 7f880bee9f2e720c764c05f4006739a6b55f969b
SHA512 c759c51661350d4da25c4cfe2fb7af312a3e0da8bb0ed0d5cdc978eba883b7deccf3bb858a7d94b707732a0fa2df18edb0d8674202601f94be59e4812d66a45d
SSDEEP 3072:9IvZcg60rvLOi1J4OQ+Syf8RUnTmxrmDRZhuMZQmDVX5el/vzFQ8:9qZd/vLOVOQ4ka2rm/hu1mDmJv5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34799

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery DeleteVolumeMountPointA InterlockedIncrement GetCommState SetDefaultCommConfigW GetProfileStringW SetComputerNameW AddConsoleAliasW GetSystemDefaultLCID GetConsoleTitleA GetCompressedFileSizeW WaitNamedPipeW CreateActCtxW EnumResourceTypesA SetHandleCount TlsSetValue FindResourceExA LoadLibraryW InterlockedPopEntrySList GetStringTypeExW SetConsoleMode GetModuleFileNameW GetConsoleAliasesW GetLongPathNameW SetLastError MoveFileExA GetProcAddress VirtualAlloc SetStdHandle SearchPathA SetThreadPriorityBoost LoadLibraryA LocalAlloc SetCalendarInfoW WritePrivateProfileStringA CreateHardLinkW OpenEventA BeginUpdateResourceA WriteProfileSectionW AddAtomA FoldStringA GetModuleHandleA FreeEnvironmentStringsW WaitForDebugEvent QueryPerformanceFrequency DeleteFileW GetConsoleProcessList EnumCalendarInfoExA ReadConsoleOutputCharacterA CreateFileA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType GetStartupInfoA SetFilePointer GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CloseHandle

user32

GetCaretBlinkTime

gdi32

CreateCompatibleBitmap SelectPalette GetBoundsRect

Sharing