file[.]exe | Triage™

General

Target
file.exe
Size 325KB
Sample230424-tgryfsch97
SHA256 b8575c68058ec0f8ad9be38e9ddd88937fa7099fe216c6598777cfbcd240cacb
MD5 0d16b13ba328db7a22b0243804b4bd98
SHA1 ce3ac1789f41af233a285ad6488c4aacfc93fb20
SHA512 f8cdf2d1447e59c822e8186c7c8b1a87053020582a41aa195b324e7add92cb96e18bd88e95acca28a1c0d9e0c23240cf938d5525ad57fc36985fd511296c9cae
SSDEEP 6144:XsbQ5PQ1RmimMlFjqdw1yACGG2sUK+oRZtpBTV:XsbOimiTFIwM52sUK+gPpr
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 325KB

file.exe

IMPHASH c263ea9fa71edd34b56a166511864643
SHA256 b8575c68058ec0f8ad9be38e9ddd88937fa7099fe216c6598777cfbcd240cacb
MD5 0d16b13ba328db7a22b0243804b4bd98
SHA1 ce3ac1789f41af233a285ad6488c4aacfc93fb20
SHA512 f8cdf2d1447e59c822e8186c7c8b1a87053020582a41aa195b324e7add92cb96e18bd88e95acca28a1c0d9e0c23240cf938d5525ad57fc36985fd511296c9cae
SSDEEP 6144:XsbQ5PQ1RmimMlFjqdw1yACGG2sUK+oRZtpBTV:XsbOimiTFIwM52sUK+gPpr
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42568

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalFix CreateMutexW EnumCalendarInfoA GetConsoleAliasesLengthW RtlCaptureContext GetDriveTypeW GlobalCompact InterlockedIncrement EnumCalendarInfoW GetCommState ZombifyActCtx QueryDosDeviceA GetNamedPipeHandleStateA GetEnvironmentStringsW WaitForSingleObject SetComputerNameW GetModuleHandleW GetTickCount EnumResourceTypesA GetDriveTypeA GetProcessTimes GetVolumePathNameW GetConsoleCP GlobalAlloc SetFileShortNameW LoadLibraryW GetConsoleWindow GetConsoleAliasExesLengthW GetStringTypeExW GetFileAttributesA GetConsoleAliasW GetFileAttributesW GetBinaryTypeW FindNextVolumeMountPointW SetTapePosition EnumSystemLocalesA GetPrivateProfileIntW GetLastError GetProcAddress CreateJobSet RemoveDirectoryA UnhandledExceptionFilter LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW BeginUpdateResourceA SetThreadIdealProcessor FindAtomA FoldStringA GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW GetShortPathNameW GetCPInfoExA SetCalendarInfoA SetThreadAffinityMask TerminateJobObject MoveFileWithProgressW DebugBreak InterlockedPushEntrySList EnumSystemLocalesW DeleteFileA SetFilePointer WriteConsoleW FlushFileBuffers CreateFileW GetConsoleMode WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary SetStdHandle

user32

DefDlgProcA GetMenuBarInfo

shell32

DuplicateIcon

Sharing