file[.]exe | Triage™

General

Target
file.exe
Size 357KB
Sample230210-slrb2sfc96
SHA256 3feecb6e1f0296b7a9cb99e9cde0469c98bd96faed0beda76998893fbdeb9411
MD5 b063b65e112de3e4d71e34d2ad049f7e
SHA1 dfda6b6fb21435d275d93e8ff71bbf5063ceeafe
SHA512 7b5b7b800fcd861cdbc929aeae026572f09aeb4463579f6b3d5dd7c541f7df3d2a6af0660fc542b05b2cf73ec4ef02807da586e2ed9e703a84354b2476c6851d
SSDEEP 3072:o9Gkbk+xiAG7a4qROHlgQ/bYopV9awkxPoQn5M79nf6Np2G2UU:cH4AGa4FFPYopnZQ+RnfWp2G
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 357KB

file.exe

IMPHASH 844a2d30ece05bea398a662fadfd98b9
SHA256 3feecb6e1f0296b7a9cb99e9cde0469c98bd96faed0beda76998893fbdeb9411
MD5 b063b65e112de3e4d71e34d2ad049f7e
SHA1 dfda6b6fb21435d275d93e8ff71bbf5063ceeafe
SHA512 7b5b7b800fcd861cdbc929aeae026572f09aeb4463579f6b3d5dd7c541f7df3d2a6af0660fc542b05b2cf73ec4ef02807da586e2ed9e703a84354b2476c6851d
SSDEEP 3072:o9Gkbk+xiAG7a4qROHlgQ/bYopV9awkxPoQn5M79nf6Np2G2UU:cH4AGa4FFPYopnZQ+RnfWp2G
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29559

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetComputerNameW GetModuleHandleW GetTickCount GetGeoInfoW LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError SetLastError InterlockedIncrement VirtualAlloc GetProcessWorkingSetSize LocalAlloc GetNumberFormatW AddAtomW SetCommMask FoldStringW BuildCommDCBA LCMapStringW WriteConsoleOutputCharacterA GetProcAddress SetLocaleInfoA LCMapStringA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapFree HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetListBoxInfo

advapi32

ReportEventA BackupEventLogA

winhttp

WinHttpCheckPlatform

Resubmissions

Sharing