file[.]exe | Triage™

General

Target
file.exe
Size 482KB
Sample230211-byjdjaac4x
SHA256 870a52a7666d24cb1a62f96eb01097d6d30bbf363c0e0ddd23bd8d2b7b1c4ef0
MD5 a028683dc8f3e7842a0d70e43c170381
SHA1 1551e47981904f70665056f371394989625eb5cd
SHA512 42320affd6292ed1622be553d0102efaa0d68d9bd2beb7979129ab1fc8c352f2c8324cf65ca88c38140037c191be668363a92eb5fe4dbfe1e76a339c8000c61c
SSDEEP 6144:Vrd4HyHW3eCqY4tV23t6z6UPTvR6kF0NUK5MdkT4CfZt5D:Vi2W3X+tgc+UP7z0CkMdk
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 482KB

file.exe

IMPHASH 3fed571cd63b33679b8971e59a5032f4
SHA256 870a52a7666d24cb1a62f96eb01097d6d30bbf363c0e0ddd23bd8d2b7b1c4ef0
MD5 a028683dc8f3e7842a0d70e43c170381
SHA1 1551e47981904f70665056f371394989625eb5cd
SHA512 42320affd6292ed1622be553d0102efaa0d68d9bd2beb7979129ab1fc8c352f2c8324cf65ca88c38140037c191be668363a92eb5fe4dbfe1e76a339c8000c61c
SSDEEP 6144:Vrd4HyHW3eCqY4tV23t6z6UPTvR6kF0NUK5MdkT4CfZt5D:Vi2W3X+tgc+UP7z0CkMdk
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38013

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError InterlockedIncrement GetProcAddress VirtualAlloc BuildCommDCBW GetProcessWorkingSetSize AddAtomW GetCommMask FoldStringW GetCurrentProcessId LCMapStringW GetLocaleInfoW WriteConsoleOutputCharacterA SetLastError SetLocaleInfoA LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing