file[.]exe | Triage™

General

Target
file.exe
Size 1.9MB
Sample230208-3pd61aae6s
SHA256 d994d8264d8511cb16ce67ed790a7896d0dbbe44d36eaffb43643ff34f3dc177
MD5 82e352734e7c6089f9ebf583a17f9dc0
SHA1 fcba99d9f1781a1f85bb820e46de5a2ad17b951a
SHA512 5774e771b7a021ed3002aa0bac91432dbb22490794e46dae02bdb03a0491b32a234801a5dcb462f659f06e58524a07af1e01b4a27661cbdba41454bcecf5e62a
SSDEEP 49152:n9W1se/+bpKCfH8godWycU7cwdTQepT/PvO:nHpKCEfNxgeprPv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 1.9MB

file.exe

IMPHASH bf429ce1bef7a73c16e22bdf4abc3568
SHA256 d994d8264d8511cb16ce67ed790a7896d0dbbe44d36eaffb43643ff34f3dc177
MD5 82e352734e7c6089f9ebf583a17f9dc0
SHA1 fcba99d9f1781a1f85bb820e46de5a2ad17b951a
SHA512 5774e771b7a021ed3002aa0bac91432dbb22490794e46dae02bdb03a0491b32a234801a5dcb462f659f06e58524a07af1e01b4a27661cbdba41454bcecf5e62a
SSDEEP 49152:n9W1se/+bpKCfH8godWycU7cwdTQepT/PvO:nHpKCEfNxgeprPv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21002

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode WriteConsoleOutputCharacterA InterlockedIncrement GetCurrentProcess CancelWaitableTimer GetTickCount LoadLibraryW GetPrivateProfileStructW GetBinaryTypeA GetGeoInfoA OpenMutexW GetLastError SetLastError GetProcAddress SetLocaleInfoA EnumSystemCodePagesW BuildCommDCBW GetProcessWorkingSetSize LocalAlloc GetNumberFormatW GetCommMask AddAtomA FoldStringA GetModuleHandleA ReadConsoleInputW LCMapStringW VirtualAlloc GetComputerNameA HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

GetListBoxInfo LoadMenuA

advapi32

ReportEventA

Sharing