file[.]exe | Triage™

General

Target
file.exe
Size 454KB
Sample230210-mkdrnsaf91
SHA256 aabfb8f93787c9a79b570765aef8fb21c6de596c552eb597c23a88bb095b5045
MD5 a1c18bda24cb41401dd3a65ee234e1b6
SHA1 8603e6b035dce6538ecb56c8b0d416058786b2a2
SHA512 c2240c1479c1ecf090afb3e515a5adfa754edec8b675c5376c1855b311fad348fac3347dc1511b8a7db104a8de88824de596935b37183c28404a4322d67f634d
SSDEEP 6144:HQ5qaa8+1ZayBL0dJAOK17h5+eBn4IItatzoAq6Qv4RynfWAncoUA/:HYqlZvQFK1Vb4vatsLQcnfWUX/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 454KB

file.exe

IMPHASH d04600003f7189fa31b1242ba148a436
SHA256 aabfb8f93787c9a79b570765aef8fb21c6de596c552eb597c23a88bb095b5045
MD5 a1c18bda24cb41401dd3a65ee234e1b6
SHA1 8603e6b035dce6538ecb56c8b0d416058786b2a2
SHA512 c2240c1479c1ecf090afb3e515a5adfa754edec8b675c5376c1855b311fad348fac3347dc1511b8a7db104a8de88824de596935b37183c28404a4322d67f634d
SSDEEP 6144:HQ5qaa8+1ZayBL0dJAOK17h5+eBn4IItatzoAq6Qv4RynfWAncoUA/:HYqlZvQFK1Vb4vatsLQcnfWUX/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29495

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GlobalAlloc LoadLibraryW GetPrivateProfileStructW GetGeoInfoA GetBinaryTypeW GetTempPathW LCMapStringA OpenMutexW InterlockedIncrement SetLastError GetProcAddress VirtualAlloc GetProcessWorkingSetSize AddAtomW SetCommMask FoldStringW BuildCommDCBA ReadConsoleInputW WriteConsoleOutputCharacterA GetLastError SetLocaleInfoA LCMapStringW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapFree HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetListBoxInfo

advapi32

ReportEventA BackupEventLogW

winhttp

WinHttpCheckPlatform

Sharing