file[.]exe | Triage™

General

Target
file.exe
Size 477KB
Sample230211-jcyv4agg33
SHA256 c57cb4605cfbf8743c85fd0e71f319cfb81c939980152d797d87a97ef3a75afd
MD5 b06433c42f02e4bec57de7331acdd8fc
SHA1 8e73cee46ff1422c323f3f8577a98b429746bc53
SHA512 1a90fdd5685eebef1bf267766b77f84becb76efeb1cf8f63934661432799cf2fe51748f859d61510ea274e1e5ee935c263a87bb69726bd52aaedb57169110e08
SSDEEP 6144:LSReU9VNYHJoK0eWxye4ZBDs0Rwt6skF6eUkBH/3wHH0AMdkTvZt5:L8AJ524pyt6EEJPWDMdk
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 477KB

file.exe

IMPHASH 4319aad8f4d315da40f6f14bc8933fbe
SHA256 c57cb4605cfbf8743c85fd0e71f319cfb81c939980152d797d87a97ef3a75afd
MD5 b06433c42f02e4bec57de7331acdd8fc
SHA1 8e73cee46ff1422c323f3f8577a98b429746bc53
SHA512 1a90fdd5685eebef1bf267766b77f84becb76efeb1cf8f63934661432799cf2fe51748f859d61510ea274e1e5ee935c263a87bb69726bd52aaedb57169110e08
SSDEEP 6144:LSReU9VNYHJoK0eWxye4ZBDs0Rwt6skF6eUkBH/3wHH0AMdkTvZt5:L8AJ524pyt6EEJPWDMdk
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38205

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileWithProgressA GetModuleHandleW GetTickCount GetNumberFormatA GetConsoleTitleA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA GetThreadPriorityBoost GetTempPathW GetStartupInfoA GetLastError SetLastError InterlockedIncrement VirtualAlloc FreeUserPhysicalPages GetProcessWorkingSetSize BuildCommDCBAndTimeoutsW GetCommMask AddAtomA FoldStringA GetCurrentProcessId LCMapStringW CopyFileExA GetLocaleInfoW WriteConsoleOutputCharacterW GetProcAddress SetLocaleInfoA LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing