file[.]exe | Triage™

General

Target
file.exe
Size 386KB
Sample230210-zmlaracd66
SHA256 cf5585c64907307b1467d74edae81156428e714eccdd8095f90ed4364d59d681
MD5 6107575e1d9c56c520f4eb7077813ee6
SHA1 d482fe265dea5d1f87f9c3511df3861727f9ca98
SHA512 e125689b4c114a6b512b180768ff4f2c691d61b2a222e409cc09abe3802cbb0c3926ff0a552c99abc6261df6b794013307b471060fc1985e8b17b04a4dbf24c9
SSDEEP 3072:2r/rc4M0h55xdOGHccAWrDPMHlunt4kez5Lg9nf6NORR92UU7:wf9rOKHnMHlut4kIYnfWOR
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 386KB

file.exe

IMPHASH d65ef0c2fa9b2ff4fcd0a10cf0acdf4b
SHA256 cf5585c64907307b1467d74edae81156428e714eccdd8095f90ed4364d59d681
MD5 6107575e1d9c56c520f4eb7077813ee6
SHA1 d482fe265dea5d1f87f9c3511df3861727f9ca98
SHA512 e125689b4c114a6b512b180768ff4f2c691d61b2a222e409cc09abe3802cbb0c3926ff0a552c99abc6261df6b794013307b471060fc1985e8b17b04a4dbf24c9
SSDEEP 3072:2r/rc4M0h55xdOGHccAWrDPMHlunt4kez5Lg9nf6NORR92UU7:wf9rOKHnMHlut4kIYnfWOR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37981

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError InterlockedIncrement GetProcAddress VirtualAlloc BuildCommDCBW GetProcessWorkingSetSize AddAtomW GetCommMask FoldStringW GetCurrentProcessId LCMapStringW GetLocaleInfoW WriteConsoleOutputCharacterA SetLastError SetLocaleInfoA LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpCheckPlatform

Sharing