file[.]exe | Triage™

General

Target
file.exe
Size 386KB
Sample230211-fxkmeshc62
SHA256 9e6d46159f6f9749675bb53df837d7c7a696ce55e7d3e5ed187bbe5213830eb3
MD5 cf089fe5e9f8ca7fafddd5dee1430282
SHA1 b0a507aaf3deed0bb99e696a0d117e783bb5640a
SHA512 31ffb7a9905e7b645f0a1a0c382c53283c43e964b346e01848eed6fd15df9f2ff6ee83e28b88937ec164be56d37307900469537c61032ac8c2652f653ed06600
SSDEEP 6144:fj0d7bU50BOW37WJMGWgQwMdkTy6Zt5d:fIBrjl5wMdk2
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 386KB

file.exe

IMPHASH 3fed571cd63b33679b8971e59a5032f4
SHA256 9e6d46159f6f9749675bb53df837d7c7a696ce55e7d3e5ed187bbe5213830eb3
MD5 cf089fe5e9f8ca7fafddd5dee1430282
SHA1 b0a507aaf3deed0bb99e696a0d117e783bb5640a
SHA512 31ffb7a9905e7b645f0a1a0c382c53283c43e964b346e01848eed6fd15df9f2ff6ee83e28b88937ec164be56d37307900469537c61032ac8c2652f653ed06600
SSDEEP 6144:fj0d7bU50BOW37WJMGWgQwMdkTy6Zt5d:fIBrjl5wMdk2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38013

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError InterlockedIncrement GetProcAddress VirtualAlloc BuildCommDCBW GetProcessWorkingSetSize AddAtomW GetCommMask FoldStringW GetCurrentProcessId LCMapStringW GetLocaleInfoW WriteConsoleOutputCharacterA SetLastError SetLocaleInfoA LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing