file[.]exe | Triage™

General

Target
file.exe
Size 385KB
Sample230210-wtqx2aec27
SHA256 f2a65ee9f937a7937fd4bb47a67a87f4c0619fabb192612837d020c9712f1533
MD5 dfd4a5fc7dc081d9e6a1af88f62b7d87
SHA1 8189c986400e13d5ebd29d43e1ed26b3a5638022
SHA512 6a13393e914f86fc5e800d069e1bb082e4da99a21531200eb46444f3da8b8ac079a4af945aa9c95bd859d4cc83452b288fd0ad944c548c465111521d83b1708a
SSDEEP 6144:C60ylp0UilWqMz71lFGErL8uPQpunfW7J:C7WqMHZ8cnfW
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 385KB

file.exe

IMPHASH 2c399d381d03e44b02e91ad01ca3c756
SHA256 f2a65ee9f937a7937fd4bb47a67a87f4c0619fabb192612837d020c9712f1533
MD5 dfd4a5fc7dc081d9e6a1af88f62b7d87
SHA1 8189c986400e13d5ebd29d43e1ed26b3a5638022
SHA512 6a13393e914f86fc5e800d069e1bb082e4da99a21531200eb46444f3da8b8ac079a4af945aa9c95bd859d4cc83452b288fd0ad944c548c465111521d83b1708a
SSDEEP 6144:C60ylp0UilWqMz71lFGErL8uPQpunfW7J:C7WqMHZ8cnfW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37997

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GetGeoInfoW LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError SetLastError InterlockedIncrement VirtualAlloc BuildCommDCBW GetProcessWorkingSetSize LocalAlloc AddAtomW GetCommMask FoldStringW GetCurrentProcessId LCMapStringW GetLocaleInfoW WriteConsoleOutputCharacterA GetProcAddress SetLocaleInfoA LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuW GetListBoxInfo

advapi32

ReportEventA BackupEventLogA

winhttp

WinHttpCheckPlatform

Sharing