file[.]exe | Triage™

General

Target
file.exe
Size 481KB
Sample230210-w6ltvaef61
SHA256 4a87855ce2047b2b89f77edbe91a8223f0f4fedf36bd3ebd5ae19017d725bfe1
MD5 0e5b399ada034834065d5a842ec81d91
SHA1 5b2c36da67c0b12682d2a3b1706e053af804c5ad
SHA512 6461d371a64e5577a523778bcbb5d430ac0e90c0f920be1e0f1d2f66a33eaf4c1bad870fed8876d1407220e55d8be639d4d69cf1ebce0720fab465d722555ac8
SSDEEP 6144:RFCgNq0sy7yRksDnmTm1aQvEvP/juxWwXpYnfWG+Sf:ncy+RXalQ6/ju96nfW
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 481KB

file.exe

IMPHASH 2c399d381d03e44b02e91ad01ca3c756
SHA256 4a87855ce2047b2b89f77edbe91a8223f0f4fedf36bd3ebd5ae19017d725bfe1
MD5 0e5b399ada034834065d5a842ec81d91
SHA1 5b2c36da67c0b12682d2a3b1706e053af804c5ad
SHA512 6461d371a64e5577a523778bcbb5d430ac0e90c0f920be1e0f1d2f66a33eaf4c1bad870fed8876d1407220e55d8be639d4d69cf1ebce0720fab465d722555ac8
SSDEEP 6144:RFCgNq0sy7yRksDnmTm1aQvEvP/juxWwXpYnfWG+Sf:ncy+RXalQ6/ju96nfW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37997

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GetGeoInfoW LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError SetLastError InterlockedIncrement VirtualAlloc BuildCommDCBW GetProcessWorkingSetSize LocalAlloc AddAtomW GetCommMask FoldStringW GetCurrentProcessId LCMapStringW GetLocaleInfoW WriteConsoleOutputCharacterA GetProcAddress SetLocaleInfoA LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuW GetListBoxInfo

advapi32

ReportEventA BackupEventLogA

winhttp

WinHttpCheckPlatform

Sharing