file[.]exe | Triage™

General

Target
file.exe
Size 320KB
Sample230208-rht34abe23
SHA256 ed28f8a873bcef79c93d6bf892017b3da29669b162f3848f03bb463e23125afd
MD5 5a8e64b9ced5554d02596fab4ff1df44
SHA1 92da938c667b93ae3fa7724ee2fbd0850011ec14
SHA512 3b7f05bf796d4273b6b0aa0ef661d8b7b9e6f97d6f897a4c5604d7c40510b3ed7644169b44668d50b6b979ffcb93375b978ea69bfcf8c71c7a356749f5669983
SSDEEP 3072:4PP7xuGxKRNLNLwQYCSLtZsa9qFEmevXUU9xktZaRLStKRxhUw:437xciFLPt9qFEmTkRgtKB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 320KB

file.exe

IMPHASH 8c22d8e692fb0a7b86ba80b3104d1a04
SHA256 ed28f8a873bcef79c93d6bf892017b3da29669b162f3848f03bb463e23125afd
MD5 5a8e64b9ced5554d02596fab4ff1df44
SHA1 92da938c667b93ae3fa7724ee2fbd0850011ec14
SHA512 3b7f05bf796d4273b6b0aa0ef661d8b7b9e6f97d6f897a4c5604d7c40510b3ed7644169b44668d50b6b979ffcb93375b978ea69bfcf8c71c7a356749f5669983
SSDEEP 3072:4PP7xuGxKRNLNLwQYCSLtZsa9qFEmevXUU9xktZaRLStKRxhUw:437xciFLPt9qFEmTkRgtKB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20954

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode WriteConsoleOutputCharacterA InterlockedIncrement GetCurrentProcess CancelWaitableTimer GetTickCount GetBinaryTypeA GetGeoInfoA OpenMutexW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW BuildCommDCBW SetLocaleInfoA GetProcessWorkingSetSize LocalAlloc GetNumberFormatW GetCommMask AddAtomA GetPrivateProfileStructA FoldStringA GetModuleHandleA ReadConsoleInputW LCMapStringW LoadLibraryA GetComputerNameA LCMapStringA GetStringTypeW HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar

user32

LoadMenuA GetListBoxInfo

advapi32

ReportEventA

ole32

ReadClassStg

Sharing