file[.]exe | Triage™

General

Target
file.exe
Size 477KB
Sample230211-jxpg6aaa94
SHA256 8ddedc4fe4ce72462b95a2ef3b51e4ceea9702c6ffa7801227003c95b0541dec
MD5 ec84274904146c672893fa0aafca03e9
SHA1 193df786a972b7adb026c43f0c6e43852c2b5e91
SHA512 b3000ed7bb05ce4406dd5cf80c66d510523b6c7fabe1cab180d234a5994bdecd28bdb966c063991d67b20479e1012a4b3ca04cdbd154b69b2e5b4ed78b978285
SSDEEP 6144:dcReIdYNOH5+9SMLuPukMSx5NpQR5RKhwwKYzWwnqMdkT03Zt5:dm0MMyuZSjNpQR5RKiwKYzmMdko
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 477KB

file.exe

IMPHASH 4319aad8f4d315da40f6f14bc8933fbe
SHA256 8ddedc4fe4ce72462b95a2ef3b51e4ceea9702c6ffa7801227003c95b0541dec
MD5 ec84274904146c672893fa0aafca03e9
SHA1 193df786a972b7adb026c43f0c6e43852c2b5e91
SHA512 b3000ed7bb05ce4406dd5cf80c66d510523b6c7fabe1cab180d234a5994bdecd28bdb966c063991d67b20479e1012a4b3ca04cdbd154b69b2e5b4ed78b978285
SSDEEP 6144:dcReIdYNOH5+9SMLuPukMSx5NpQR5RKhwwKYzWwnqMdkT03Zt5:dm0MMyuZSjNpQR5RKiwKYzmMdko
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38205

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileWithProgressA GetModuleHandleW GetTickCount GetNumberFormatA GetConsoleTitleA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA GetThreadPriorityBoost GetTempPathW GetStartupInfoA GetLastError SetLastError InterlockedIncrement VirtualAlloc FreeUserPhysicalPages GetProcessWorkingSetSize BuildCommDCBAndTimeoutsW GetCommMask AddAtomA FoldStringA GetCurrentProcessId LCMapStringW CopyFileExA GetLocaleInfoW WriteConsoleOutputCharacterW GetProcAddress SetLocaleInfoA LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing