file[.]exe | Triage™

General

Target
file.exe
Size 197KB
Sample230211-2d7thacf68
SHA256 60cb5e43a84ade05142dc1836c6a151523cdb73982194ad1fb761b37ce433005
MD5 1887079233927d8963b5ebe17d6efe55
SHA1 76b4a9950ba3346e8c0a2851b8f2234082c4a159
SHA512 3d934e3aa97f700d3f1f01ff8ebf0fa303c49407abc32fcc08d77217798fc7712dbef23ab4651a3c00e61cf82d99ecbb4d61c0f2d245492c050f8030e77a639e
SSDEEP 3072:8jq06+0JdnW5ClrLZqdc1WuaIu12DvrKgpurvYhV2XYWMjz4tG:8GpRf99Ec1aIu12DumV2Xmz4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 197KB

file.exe

IMPHASH 436b8e1a5416018622ed4c6d96d64f2f
SHA256 60cb5e43a84ade05142dc1836c6a151523cdb73982194ad1fb761b37ce433005
MD5 1887079233927d8963b5ebe17d6efe55
SHA1 76b4a9950ba3346e8c0a2851b8f2234082c4a159
SHA512 3d934e3aa97f700d3f1f01ff8ebf0fa303c49407abc32fcc08d77217798fc7712dbef23ab4651a3c00e61cf82d99ecbb4d61c0f2d245492c050f8030e77a639e
SSDEEP 3072:8jq06+0JdnW5ClrLZqdc1WuaIu12DvrKgpurvYhV2XYWMjz4tG:8GpRf99Ec1aIu12DumV2Xmz4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24658

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

BuildCommDCBAndTimeoutsA InterlockedIncrement GetNumberOfConsoleMouseButtons GetModuleHandleW GetCommConfig GetGeoInfoW AllocateUserPhysicalPages LoadLibraryW ReadConsoleInputA CreateEventA GetVersionExW GetMailslotInfo CreateActCtxA GetThreadPriorityBoost GetStartupInfoW GetTempPathW GetLastError SetLastError GetProcAddress VirtualAlloc FreeUserPhysicalPages DisableThreadLibraryCalls ProcessIdToSessionId GetNumberOfConsoleInputEvents LocalAlloc GetNumberFormatW AddAtomW GetCommMask ContinueDebugEvent HeapSetInformation GetConsoleTitleW GetFileAttributesExW GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar CopyFileExW SetThreadContext DosDateTimeToFileTime GetProcessWorkingSetSize DebugActiveProcess LCMapStringA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

LoadMenuA DestroyAcceleratorTable IsMenu NotifyWinEvent RealGetWindowClassA GetFocus IsCharAlphaNumericA RemovePropA CharUpperW CharLowerBuffA ClipCursor GetMenuInfo

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

winhttp

WinHttpOpen

Sharing