file[.]exe | Triage™

General

Target
file.exe
Size 381KB
Sample230211-gslvcscc76
SHA256 b8c868d87f0068784d2dde9ed6337dba6ac4caf5fd6e00994e46af1ab300d2ed
MD5 68ca1306e02d00e78fb0a61a95e94303
SHA1 433061962e60efbf6b2bae348cb888ccee369bef
SHA512 08791a0efa4e055aabe7e257d8ff6cddeefc8f4ef116087db1ef5ca771b732961bb299e52dabb71cad9fa786a2f73050fd00d7c74f39df967d7a1c81595dd0d0
SSDEEP 3072:ElEOvOzdGINs5xq+kqTjnKth6PKAB2eU6d/b9z3OhPM8qRi0Qo7sTmgu5DZymp5I:0MdEq+umfBpUc/bp3ORMdkTnoZt5I
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 381KB

file.exe

IMPHASH 3fed571cd63b33679b8971e59a5032f4
SHA256 b8c868d87f0068784d2dde9ed6337dba6ac4caf5fd6e00994e46af1ab300d2ed
MD5 68ca1306e02d00e78fb0a61a95e94303
SHA1 433061962e60efbf6b2bae348cb888ccee369bef
SHA512 08791a0efa4e055aabe7e257d8ff6cddeefc8f4ef116087db1ef5ca771b732961bb299e52dabb71cad9fa786a2f73050fd00d7c74f39df967d7a1c81595dd0d0
SSDEEP 3072:ElEOvOzdGINs5xq+kqTjnKth6PKAB2eU6d/b9z3OhPM8qRi0Qo7sTmgu5DZymp5I:0MdEq+umfBpUc/bp3ORMdkTnoZt5I
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38013

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetModuleHandleW GetTickCount GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA GetPrivateProfileStructW GetBinaryTypeW GetTempPathW OpenMutexW GetLastError InterlockedIncrement GetProcAddress VirtualAlloc BuildCommDCBW GetProcessWorkingSetSize AddAtomW GetCommMask FoldStringW GetCurrentProcessId LCMapStringW GetLocaleInfoW WriteConsoleOutputCharacterA SetLastError SetLocaleInfoA LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing