file[.]exe | Triage™

General

Target
file.exe
Size 481KB
Sample230211-dhwp2afh4x
SHA256 abcb2b655fb65331f3519551f77dd33d9b37fc152759b9bb9a900e9ecd9e5dbb
MD5 afed7bc8ab9aec851ec9b2f143cfffda
SHA1 7c41b91eea134cb422843f65b984bd27d3ced381
SHA512 858903a336598048d561ab12bbdf3500c1d64f884228c90049084d2a9fd9f1391b77436e703dbf7779d8a4c015eef15f777bae4f64d294503c31171a72b9dc5f
SSDEEP 6144:yDdwK4+KFvNf8Gl2/6qMwfeMggKExccyiiwMdkTwVzwZt5D:ygpNk6aeuxcxiiwMdkO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 481KB

file.exe

IMPHASH 3fed571cd63b33679b8971e59a5032f4
SHA256 abcb2b655fb65331f3519551f77dd33d9b37fc152759b9bb9a900e9ecd9e5dbb
MD5 afed7bc8ab9aec851ec9b2f143cfffda
SHA1 7c41b91eea134cb422843f65b984bd27d3ced381
SHA512 858903a336598048d561ab12bbdf3500c1d64f884228c90049084d2a9fd9f1391b77436e703dbf7779d8a4c015eef15f777bae4f64d294503c31171a72b9dc5f
SSDEEP 6144:yDdwK4+KFvNf8Gl2/6qMwfeMggKExccyiiwMdkTwVzwZt5D:ygpNk6aeuxcxiiwMdkO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38013

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError InterlockedIncrement GetProcAddress VirtualAlloc BuildCommDCBW GetProcessWorkingSetSize AddAtomW GetCommMask FoldStringW GetCurrentProcessId LCMapStringW GetLocaleInfoW WriteConsoleOutputCharacterA SetLastError SetLocaleInfoA LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing