file[.]exe | Triage™

General

Target
file.exe
Size 417KB
Sample230208-rwva1sbf96
SHA256 84dc02e7536e6e43ecf9b93a842ed9c878ebb270bef654ab2cf4ea5dea8435d1
MD5 313b09ed469f7a7291b7f3168bdec9fc
SHA1 0d22e457307b44e57b1b8c6dfcf5eb7b4f7f1272
SHA512 2d4b4b6f11cdc8cf8b2b7981ae3fc6c0c8ad712a4a750f2080f0c44ab8d6eed4463e9c4ce8c87254bd5a79e678c4650e7f62cea10b4b118b8439b13c7df6bbdf
SSDEEP 6144:2es6OcZvQY7fDkK2z8gwU78+ssDVWb7MbW8m9vZLgtKB+:2f6O2I8hMbn68uZLgtn
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 417KB

file.exe

IMPHASH 8c22d8e692fb0a7b86ba80b3104d1a04
SHA256 84dc02e7536e6e43ecf9b93a842ed9c878ebb270bef654ab2cf4ea5dea8435d1
MD5 313b09ed469f7a7291b7f3168bdec9fc
SHA1 0d22e457307b44e57b1b8c6dfcf5eb7b4f7f1272
SHA512 2d4b4b6f11cdc8cf8b2b7981ae3fc6c0c8ad712a4a750f2080f0c44ab8d6eed4463e9c4ce8c87254bd5a79e678c4650e7f62cea10b4b118b8439b13c7df6bbdf
SSDEEP 6144:2es6OcZvQY7fDkK2z8gwU78+ssDVWb7MbW8m9vZLgtKB+:2f6O2I8hMbn68uZLgtn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20954

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode WriteConsoleOutputCharacterA InterlockedIncrement GetCurrentProcess CancelWaitableTimer GetTickCount GetBinaryTypeA GetGeoInfoA OpenMutexW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW BuildCommDCBW SetLocaleInfoA GetProcessWorkingSetSize LocalAlloc GetNumberFormatW GetCommMask AddAtomA GetPrivateProfileStructA FoldStringA GetModuleHandleA ReadConsoleInputW LCMapStringW LoadLibraryA GetComputerNameA LCMapStringA GetStringTypeW HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar

user32

LoadMenuA GetListBoxInfo

advapi32

ReportEventA

ole32

ReadClassStg

Sharing