file[.]exe | Triage™

General

Target
file.exe
Size 356KB
Sample230210-tlsesahf75
SHA256 e24b4af172879960110a3fc13934e8b85aaefe3acf3bc7a4ff392447ae77e158
MD5 9282e6a683acc1ac202c389da29f0ae2
SHA1 0aeb2d59631892700d657f439a9485cddd43b56b
SHA512 18b4cf9eff9b288de794406dd89d6dd2679ce32d41da8082a19aa6405b7baeb2cf50a7e602bc1c3e104396bde80403ecee55d4adc7e6e71852c437074aee14c7
SSDEEP 3072:r9/b6+BUqgvKwaIIRObZowxy9bdpwQDlW3cD6eqsyvgV/x9nf6NY86Y2UUL:B7RgvBaITewxQDlJJJFfnfWY86YI
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 356KB

file.exe

IMPHASH 844a2d30ece05bea398a662fadfd98b9
SHA256 e24b4af172879960110a3fc13934e8b85aaefe3acf3bc7a4ff392447ae77e158
MD5 9282e6a683acc1ac202c389da29f0ae2
SHA1 0aeb2d59631892700d657f439a9485cddd43b56b
SHA512 18b4cf9eff9b288de794406dd89d6dd2679ce32d41da8082a19aa6405b7baeb2cf50a7e602bc1c3e104396bde80403ecee55d4adc7e6e71852c437074aee14c7
SSDEEP 3072:r9/b6+BUqgvKwaIIRObZowxy9bdpwQDlW3cD6eqsyvgV/x9nf6NY86Y2UUL:B7RgvBaITewxQDlJJJFfnfWY86YI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29543

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetComputerNameW GetModuleHandleW GetTickCount GetGeoInfoW LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError SetLastError InterlockedIncrement VirtualAlloc GetProcessWorkingSetSize LocalAlloc GetNumberFormatW AddAtomW SetCommMask FoldStringW BuildCommDCBA LCMapStringW WriteConsoleOutputCharacterA GetProcAddress SetLocaleInfoA LCMapStringA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapFree HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetListBoxInfo

advapi32

ReportEventA BackupEventLogA

winhttp

WinHttpCheckPlatform

Sharing