file[.]exe | Triage™

General

Target
file.exe
Size 321KB
Sample230209-a7gqmaca9w
SHA256 f9cb6e292b21bf9272db565066a0d4a306af9db3afbbcd4b623dad71ecd972ba
MD5 bd26d264157af97378d1e11495ff7231
SHA1 49e2c1634cd86a6eb693b622bfd37984f6a36fa5
SHA512 1e27e005e7e9e471f72a9338cc188ad9d4ba82b899acd183dbbdfbd3db5a216b5e18b20c4447c3a2a703590dd595203f0c975ebdfa96008c600547164f2cb0f3
SSDEEP 3072:4PEGSRVSPRdXgdpJxyjlRS88gyOzQFX/Q2acjCQENe+pGSFAz3:4MGUEXk4xyio/QSuQkeQGS2
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 321KB

file.exe

IMPHASH 48d903c5751da17f2c5d5f89e77b3bb9
SHA256 f9cb6e292b21bf9272db565066a0d4a306af9db3afbbcd4b623dad71ecd972ba
MD5 bd26d264157af97378d1e11495ff7231
SHA1 49e2c1634cd86a6eb693b622bfd37984f6a36fa5
SHA512 1e27e005e7e9e471f72a9338cc188ad9d4ba82b899acd183dbbdfbd3db5a216b5e18b20c4447c3a2a703590dd595203f0c975ebdfa96008c600547164f2cb0f3
SSDEEP 3072:4PEGSRVSPRdXgdpJxyjlRS88gyOzQFX/Q2acjCQENe+pGSFAz3:4MGUEXk4xyio/QSuQkeQGS2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20938

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA SetWaitableTimer InterlockedIncrement GetCurrentProcess GetComputerNameW GetTickCount GetNumberFormatA LoadLibraryW GetPrivateProfileStructW GetBinaryTypeA GetGeoInfoA OpenMutexW GetLastError SetLastError GetNumaProcessorNode VirtualAlloc EnumSystemCodePagesW BuildCommDCBW GetProcessWorkingSetSize LocalAlloc AddAtomW GetCommMask FoldStringA GetModuleHandleA ReadConsoleInputW LCMapStringW GetProcAddress SetLocaleInfoA HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

GetListBoxInfo LoadMenuA

advapi32

ReportEventA

Sharing