file[.]exe | Triage™

General

Target
file.exe
Size 314KB
Sample230208-prrcfsag54
SHA256 c7a7edcb38bbf0996d90eed750aa01a9230bddfb1dff2d64986d3f412879581e
MD5 5fdb0377b56ca654b1267a57a68144a6
SHA1 41a2c773ca056334c3e68aac6af1cd7216bbcc3e
SHA512 a0ab957b5353abced2f11ca54562f86211a197c1ed148f2d6f2411b741d2cebe6bccff4e03b2b37557d411df664ec342711e0b3694d003d47be3a306110549cd
SSDEEP 3072:zwAqf7GtRl6ZbXWcnOp1FcLtxmhZbXBchQK7uCDEjHSOWByUAl1gm2bBWnU:zJyQ6ZbGcnMELOp8BDuHXWUjd2bIn
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 314KB

file.exe

IMPHASH 44724d6c2abffef4f6a69c1f8fdec6cf
SHA256 c7a7edcb38bbf0996d90eed750aa01a9230bddfb1dff2d64986d3f412879581e
MD5 5fdb0377b56ca654b1267a57a68144a6
SHA1 41a2c773ca056334c3e68aac6af1cd7216bbcc3e
SHA512 a0ab957b5353abced2f11ca54562f86211a197c1ed148f2d6f2411b741d2cebe6bccff4e03b2b37557d411df664ec342711e0b3694d003d47be3a306110549cd
SSDEEP 3072:zwAqf7GtRl6ZbXWcnOp1FcLtxmhZbXBchQK7uCDEjHSOWByUAl1gm2bBWnU:zJyQ6ZbGcnMELOp8BDuHXWUjd2bIn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20320

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess CancelWaitableTimer GetTickCount GetGeoInfoW GlobalAlloc lstrcpynW EnumSystemCodePagesA GetShortPathNameA GetLastError GetProcAddress VirtualAlloc LoadLibraryA BuildCommDCBAndTimeoutsW GetCommMask AddAtomA GetPrivateProfileStructA FoldStringA GetModuleHandleA SetLocaleInfoW BuildCommDCBA ReadConsoleInputW LCMapStringW GetDateFormatW InterlockedIncrement GetProcessWorkingSetSize GetComputerNameA LCMapStringA GetStringTypeW HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar

user32

LoadMenuA GetListBoxInfo

gdi32

GetTextExtentExPointW

advapi32

ReportEventA

ole32

ReadClassStg

Sharing