file[.]exe | Triage™

General

Target
file.exe
Size 322KB
Sample230208-w52tnsec33
SHA256 15c5c832b28cd8fced64386cb021d28223a08c8ded248dd13863abfd2974b06e
MD5 197878f44a5a771680a02dde0a2ecfa8
SHA1 97150aef0c1359e913e7542818fb28178be49bfe
SHA512 d11031048e87797d9ab8e5d0d2352f4873a7e84df8196fe52c5914266e1ef874b9ced1babc8416921a19ed6f6aab78b1d0d0174f4a065dd468127de5de507127
SSDEEP 3072:pPg8SK2yzxR9z0yR579koDIH9vOa1L6BjF4B2sWQDiuLpN2yvJ:pvyy5z15GoMHopBcjLiqkyvJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH 37437fdf2f996efc4629f1b4dd7357e5
SHA256 15c5c832b28cd8fced64386cb021d28223a08c8ded248dd13863abfd2974b06e
MD5 197878f44a5a771680a02dde0a2ecfa8
SHA1 97150aef0c1359e913e7542818fb28178be49bfe
SHA512 d11031048e87797d9ab8e5d0d2352f4873a7e84df8196fe52c5914266e1ef874b9ced1babc8416921a19ed6f6aab78b1d0d0174f4a065dd468127de5de507127
SSDEEP 3072:pPg8SK2yzxR9z0yR579koDIH9vOa1L6BjF4B2sWQDiuLpN2yvJ:pvyy5z15GoMHopBcjLiqkyvJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21018

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode WriteConsoleOutputCharacterA InterlockedIncrement GetCurrentProcess CancelWaitableTimer GetTickCount LoadLibraryW GetPrivateProfileStructW GetBinaryTypeA GetGeoInfoA OpenMutexW GetLastError SetLastError GetProcAddress SetLocaleInfoA EnumSystemCodePagesW BuildCommDCBW GetProcessWorkingSetSize LocalAlloc GetNumberFormatW GetCommMask AddAtomA FoldStringA GetModuleHandleA ReadConsoleInputW LCMapStringW VirtualAlloc GetComputerNameA LCMapStringA GetStringTypeW HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar

user32

LoadMenuA GetListBoxInfo

advapi32

ReportEventA

ole32

ReadClassStg

Sharing