file[.]exe | Triage™

General

Target
file.exe
Size 386KB
Sample230211-dn2s8shc39
SHA256 572feb78bfc598e690ab51966e9b9d8bdce14fe3f356fa7d6a42c3f014f38ae9
MD5 4289ad75d58d424c9499da61eb69eea7
SHA1 55797003a9e7a73dbcdd965bc7762149751296d5
SHA512 e6585608f4b72070bfc022e2ebb0f6dfd21b1cef6e20d7284d41ab85849e5c19fbccbe941d833ad3ad2610cc1a93d2d4294bdbf0d711416715410fd87c63e3b4
SSDEEP 3072:qlOzhHzdG+s5xt9IQCqcbfW7chxuDBHaEnS2/zHNLFCWk76tPM8qRi0Qo7sTm2Bh:WGd8kQWbf6chxEgExNM/2MdkTDpZt5D
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 386KB

file.exe

IMPHASH 3fed571cd63b33679b8971e59a5032f4
SHA256 572feb78bfc598e690ab51966e9b9d8bdce14fe3f356fa7d6a42c3f014f38ae9
MD5 4289ad75d58d424c9499da61eb69eea7
SHA1 55797003a9e7a73dbcdd965bc7762149751296d5
SHA512 e6585608f4b72070bfc022e2ebb0f6dfd21b1cef6e20d7284d41ab85849e5c19fbccbe941d833ad3ad2610cc1a93d2d4294bdbf0d711416715410fd87c63e3b4
SSDEEP 3072:qlOzhHzdG+s5xt9IQCqcbfW7chxuDBHaEnS2/zHNLFCWk76tPM8qRi0Qo7sTm2Bh:WGd8kQWbf6chxEgExNM/2MdkTDpZt5D
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38013

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError InterlockedIncrement GetProcAddress VirtualAlloc BuildCommDCBW GetProcessWorkingSetSize AddAtomW GetCommMask FoldStringW GetCurrentProcessId LCMapStringW GetLocaleInfoW WriteConsoleOutputCharacterA SetLastError SetLocaleInfoA LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing