file[.]exe | Triage™

General

Target
file.exe
Size 321KB
Sample230209-e1c63sbg5v
SHA256 f8c224b37156e1866b3d0e67d8b7a9ce91a75952939c838bff2f2ca6574318de
MD5 d71342978492c49e0caacca9bb22fcb3
SHA1 0123ac331f78b86e45c45194360daa9aab75e244
SHA512 bfc88c14984eb7bb44d33acb34472bdcaf0af9cd7e183627e8c56c6df3c0d374cc53dfda5b71008ee4832f5b1b80679ede9cc537b74b2b066dadf83a49aecc03
SSDEEP 3072:yPEYRAfsQWPRdOQt6t4nM0DqPUFbG98cRv1nDi76PCQENe+pGSY3rnYz3:yMY47A5Qt4XHi9jt/KQkeQGSYbnI
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 321KB

file.exe

IMPHASH 48d903c5751da17f2c5d5f89e77b3bb9
SHA256 f8c224b37156e1866b3d0e67d8b7a9ce91a75952939c838bff2f2ca6574318de
MD5 d71342978492c49e0caacca9bb22fcb3
SHA1 0123ac331f78b86e45c45194360daa9aab75e244
SHA512 bfc88c14984eb7bb44d33acb34472bdcaf0af9cd7e183627e8c56c6df3c0d374cc53dfda5b71008ee4832f5b1b80679ede9cc537b74b2b066dadf83a49aecc03
SSDEEP 3072:yPEYRAfsQWPRdOQt6t4nM0DqPUFbG98cRv1nDi76PCQENe+pGSY3rnYz3:yMY47A5Qt4XHi9jt/KQkeQGSYbnI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20954

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA SetWaitableTimer InterlockedIncrement GetCurrentProcess GetComputerNameW GetTickCount GetNumberFormatA LoadLibraryW GetPrivateProfileStructW GetBinaryTypeA GetGeoInfoA OpenMutexW GetLastError SetLastError GetNumaProcessorNode VirtualAlloc EnumSystemCodePagesW BuildCommDCBW GetProcessWorkingSetSize LocalAlloc AddAtomW GetCommMask FoldStringA GetModuleHandleA ReadConsoleInputW LCMapStringW GetProcAddress SetLocaleInfoA HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

GetListBoxInfo LoadMenuA

advapi32

ReportEventA

Sharing