file[.]exe | Triage™

General

Target
file.exe
Size 357KB
Sample230210-nl6draea85
SHA256 dae33d38f40bc387c3decf2d8388795f5aaae213062181806c8a6a94d4e31409
MD5 f35b1bf55afb2ec8d9e13a8f15e21d89
SHA1 5aa7bf6e603321edb6e6fd244fabc6e9b195de0b
SHA512 761768e1ca5895ad8b25e7050e857f254b32b31bbb163e10f91dba5a0b6ae6819d47ab970947f348b8f62953cb5925102d46145ae95a595db7f92fa99174d0ff
SSDEEP 3072:ZwCbieK9GBaH91u4+R6hNOruBFYI4TzCVA8KmuyTlfdU2cZpx9nf6NAI2UUU/:aKG8adVhr/Y+VA8K65JcZVnfWfT/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 357KB

file.exe

IMPHASH d04600003f7189fa31b1242ba148a436
SHA256 dae33d38f40bc387c3decf2d8388795f5aaae213062181806c8a6a94d4e31409
MD5 f35b1bf55afb2ec8d9e13a8f15e21d89
SHA1 5aa7bf6e603321edb6e6fd244fabc6e9b195de0b
SHA512 761768e1ca5895ad8b25e7050e857f254b32b31bbb163e10f91dba5a0b6ae6819d47ab970947f348b8f62953cb5925102d46145ae95a595db7f92fa99174d0ff
SSDEEP 3072:ZwCbieK9GBaH91u4+R6hNOruBFYI4TzCVA8KmuyTlfdU2cZpx9nf6NAI2UUU/:aKG8adVhr/Y+VA8K65JcZVnfWfT/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29495

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GlobalAlloc LoadLibraryW GetPrivateProfileStructW GetGeoInfoA GetBinaryTypeW GetTempPathW LCMapStringA OpenMutexW InterlockedIncrement SetLastError GetProcAddress VirtualAlloc GetProcessWorkingSetSize AddAtomW SetCommMask FoldStringW BuildCommDCBA ReadConsoleInputW WriteConsoleOutputCharacterA GetLastError SetLocaleInfoA LCMapStringW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapFree HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetListBoxInfo

advapi32

ReportEventA BackupEventLogW

winhttp

WinHttpCheckPlatform

Sharing