file[.]exe | Triage™

General

Target
file.exe
Size 453KB
Sample230210-nna1maeb76
SHA256 23f60d5853578489761ea850c9dc502d031abb9a4a873ca8bb971fa5c6fb080c
MD5 b0a0cec3b7f719c0761f8549c317fb37
SHA1 283fe8464e12a6f79244f488c17041b731151ff1
SHA512 ed1d720af0776ac4ffd40b6611a6dcbb94f70132c006af60276e0556ca6c0611e510aa1f7f90e78f281436ec31bd63f7883cccc9adf3f9f1ab813b73f61e1faa
SSDEEP 6144:Y9eHa+EQ//qp3hRW0C2wm4HPH41ODXvrnqZAvqSvAJnfWIT/:Y8/hUxUiwm4vzDXvLqyv3AnfWo/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 453KB

file.exe

IMPHASH d04600003f7189fa31b1242ba148a436
SHA256 23f60d5853578489761ea850c9dc502d031abb9a4a873ca8bb971fa5c6fb080c
MD5 b0a0cec3b7f719c0761f8549c317fb37
SHA1 283fe8464e12a6f79244f488c17041b731151ff1
SHA512 ed1d720af0776ac4ffd40b6611a6dcbb94f70132c006af60276e0556ca6c0611e510aa1f7f90e78f281436ec31bd63f7883cccc9adf3f9f1ab813b73f61e1faa
SSDEEP 6144:Y9eHa+EQ//qp3hRW0C2wm4HPH41ODXvrnqZAvqSvAJnfWIT/:Y8/hUxUiwm4vzDXvLqyv3AnfWo/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29495

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GlobalAlloc LoadLibraryW GetPrivateProfileStructW GetGeoInfoA GetBinaryTypeW GetTempPathW LCMapStringA OpenMutexW InterlockedIncrement SetLastError GetProcAddress VirtualAlloc GetProcessWorkingSetSize AddAtomW SetCommMask FoldStringW BuildCommDCBA ReadConsoleInputW WriteConsoleOutputCharacterA GetLastError SetLocaleInfoA LCMapStringW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapFree HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetListBoxInfo

advapi32

ReportEventA BackupEventLogW

winhttp

WinHttpCheckPlatform

Sharing