file[.]exe | Triage™

General

Target
file.exe
Size 386KB
Sample230211-e64k8adg8w
SHA256 01f17bcb1131cea5bf9c9a0fbabe87a76313d4568078cd33e15f47e13fc7665a
MD5 12a11c508ed274ba0b4dd4f1e500b612
SHA1 0a0cb5ebd04e3f0e1182039ee9c1404f9cf3a70b
SHA512 6f8c4e0ff6338d3abea6f8d0322dedfec7b3b4dbb19c752fcdf042eacfa1d7d7a54a571b54a007668822980b98a95103b175fe59d1234fa173e9aa5346bf2ff0
SSDEEP 6144:kNdNpvgVYbPLwaKiNFjv118srwOMdkTi9DZt5d:k3bPw58v11VMdk
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 386KB

file.exe

IMPHASH 3fed571cd63b33679b8971e59a5032f4
SHA256 01f17bcb1131cea5bf9c9a0fbabe87a76313d4568078cd33e15f47e13fc7665a
MD5 12a11c508ed274ba0b4dd4f1e500b612
SHA1 0a0cb5ebd04e3f0e1182039ee9c1404f9cf3a70b
SHA512 6f8c4e0ff6338d3abea6f8d0322dedfec7b3b4dbb19c752fcdf042eacfa1d7d7a54a571b54a007668822980b98a95103b175fe59d1234fa173e9aa5346bf2ff0
SSDEEP 6144:kNdNpvgVYbPLwaKiNFjv118srwOMdkTi9DZt5d:k3bPw58v11VMdk
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38013

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError InterlockedIncrement GetProcAddress VirtualAlloc BuildCommDCBW GetProcessWorkingSetSize AddAtomW GetCommMask FoldStringW GetCurrentProcessId LCMapStringW GetLocaleInfoW WriteConsoleOutputCharacterA SetLastError SetLocaleInfoA LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing