file[.]exe | Triage™

General

Target
file.exe
Size 358KB
Sample230210-nmp36aeb44
SHA256 8d5889f08fd955603a3a5d0a74861feef799cc7d0b8d57dfa68c1be7ac9fb42a
MD5 60c870dd74d374b614492f0980725060
SHA1 b647bf9129e219b3bf8b26622c1ae900dea6f661
SHA512 5ab4c73d17bb6b46606eef9c3b85aeb6721d9d9e5ca34c1090e922818ec538d536830112015f6f500a7523c3e38985e7ebd877125ed2a394cfbf724a9be73f17
SSDEEP 6144:ovSYazFalpk8uwoe7A0pzm2ZbnfWyJA/:oax2pTPpTnfW3/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 358KB

file.exe

IMPHASH d04600003f7189fa31b1242ba148a436
SHA256 8d5889f08fd955603a3a5d0a74861feef799cc7d0b8d57dfa68c1be7ac9fb42a
MD5 60c870dd74d374b614492f0980725060
SHA1 b647bf9129e219b3bf8b26622c1ae900dea6f661
SHA512 5ab4c73d17bb6b46606eef9c3b85aeb6721d9d9e5ca34c1090e922818ec538d536830112015f6f500a7523c3e38985e7ebd877125ed2a394cfbf724a9be73f17
SSDEEP 6144:ovSYazFalpk8uwoe7A0pzm2ZbnfWyJA/:oax2pTPpTnfW3/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29495

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GlobalAlloc LoadLibraryW GetPrivateProfileStructW GetGeoInfoA GetBinaryTypeW GetTempPathW LCMapStringA OpenMutexW InterlockedIncrement SetLastError GetProcAddress VirtualAlloc GetProcessWorkingSetSize AddAtomW SetCommMask FoldStringW BuildCommDCBA ReadConsoleInputW WriteConsoleOutputCharacterA GetLastError SetLocaleInfoA LCMapStringW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapFree HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetListBoxInfo

advapi32

ReportEventA BackupEventLogW

winhttp

WinHttpCheckPlatform

Sharing