file[.]exe | Triage™

General

Target
file.exe
Size 453KB
Sample230210-tgryfshd62
SHA256 33bea9f8920829ecebf80b2b3e2f9774cab289434fd4ccb7ed4dae000cefcc50
MD5 24e7ed9ef269d5092572bb0878b01d79
SHA1 cbf9423a248a3fd31de00f2ff5eab6064aed6374
SHA512 10492ce14575d3556dc7153d373fb2b82e36d1f4591491e5c238ab47680d8e27884f3cbe8652393d33524d4a22f1ca47d62115d771d17aebe30afea646753b43
SSDEEP 6144:JQ/qaWGWbx7ul3pJ6Vlo2NJbSZmEeV1aMqj2Ytzkl5nfWCo:JymIXJsbJgmEeV8/vkl5nfW
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 453KB

file.exe

IMPHASH 844a2d30ece05bea398a662fadfd98b9
SHA256 33bea9f8920829ecebf80b2b3e2f9774cab289434fd4ccb7ed4dae000cefcc50
MD5 24e7ed9ef269d5092572bb0878b01d79
SHA1 cbf9423a248a3fd31de00f2ff5eab6064aed6374
SHA512 10492ce14575d3556dc7153d373fb2b82e36d1f4591491e5c238ab47680d8e27884f3cbe8652393d33524d4a22f1ca47d62115d771d17aebe30afea646753b43
SSDEEP 6144:JQ/qaWGWbx7ul3pJ6Vlo2NJbSZmEeV1aMqj2Ytzkl5nfWCo:JymIXJsbJgmEeV8/vkl5nfW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29559

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetComputerNameW GetModuleHandleW GetTickCount GetGeoInfoW LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError SetLastError InterlockedIncrement VirtualAlloc GetProcessWorkingSetSize LocalAlloc GetNumberFormatW AddAtomW SetCommMask FoldStringW BuildCommDCBA LCMapStringW WriteConsoleOutputCharacterA GetProcAddress SetLocaleInfoA LCMapStringA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapFree HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetListBoxInfo

advapi32

ReportEventA BackupEventLogA

winhttp

WinHttpCheckPlatform

Sharing