file[.]exe | Triage™

General

Target
file.exe
Size 322KB
Sample230209-c8qq2agc2y
SHA256 798a82f6a6b2a269f87718b2a90e97f53a9d894ea70be0f0e5b12fbd38f1e76e
MD5 09d889701b3be4a73a1a7a67703b14be
SHA1 51933d8e48b254808631ff5d137bf37b2e8c634a
SHA512 54b361fb8ddfba5c348defc1764bea1d32c03216895ad33c822c67e130c5d9463186acca613225cbe6dbd0dab04556e7c533891455a227f783e3db4f4a9bfc95
SSDEEP 3072:fPEPvCQSPRdN3mKaAWiooQhOLq8Jld+Ryg8ZSgCQENe+pGS2efz3:fMP5EN3mKgioGHJldmyQQkeQGSvL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH 48d903c5751da17f2c5d5f89e77b3bb9
SHA256 798a82f6a6b2a269f87718b2a90e97f53a9d894ea70be0f0e5b12fbd38f1e76e
MD5 09d889701b3be4a73a1a7a67703b14be
SHA1 51933d8e48b254808631ff5d137bf37b2e8c634a
SHA512 54b361fb8ddfba5c348defc1764bea1d32c03216895ad33c822c67e130c5d9463186acca613225cbe6dbd0dab04556e7c533891455a227f783e3db4f4a9bfc95
SSDEEP 3072:fPEPvCQSPRdN3mKaAWiooQhOLq8Jld+Ryg8ZSgCQENe+pGS2efz3:fMP5EN3mKgioGHJldmyQQkeQGSvL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20938

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA SetWaitableTimer InterlockedIncrement GetCurrentProcess GetComputerNameW GetTickCount GetNumberFormatA LoadLibraryW GetPrivateProfileStructW GetBinaryTypeA GetGeoInfoA OpenMutexW GetLastError SetLastError GetNumaProcessorNode VirtualAlloc EnumSystemCodePagesW BuildCommDCBW GetProcessWorkingSetSize LocalAlloc AddAtomW GetCommMask FoldStringA GetModuleHandleA ReadConsoleInputW LCMapStringW GetProcAddress SetLocaleInfoA HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

GetListBoxInfo LoadMenuA

advapi32

ReportEventA

Sharing