file[.]exe | Triage™

General

Target
file.exe
Size 469KB
Sample230211-lh7fjaeb28
SHA256 2de6202594d99f797bd810db9d39efae3d9662861f4becc0d462884df0e8b793
MD5 a78ba57b693d07b3f6e3e3243e5e781a
SHA1 a397741da1a9e27c82cb5a4fc290cc31af3af4a9
SHA512 3569bc002b86ddd445ade77df60d288fb1c7f73126bac078a451fda364bff9456ca18e411630517540d170050882c74c740f57a3a30e18797420ab319f1cd293
SSDEEP 6144:eBxmR8AVNZiuOJvB0g7ahV1CP90ulNiBMuBNmB6eMiXacRql9dKlTRT2U2dF:OxDSzOj0HhVwPNKM+jaXaR9wJRadF
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 469KB

file.exe

IMPHASH fb95de0337b46bfe4941e8d9033bd8db
SHA256 2de6202594d99f797bd810db9d39efae3d9662861f4becc0d462884df0e8b793
MD5 a78ba57b693d07b3f6e3e3243e5e781a
SHA1 a397741da1a9e27c82cb5a4fc290cc31af3af4a9
SHA512 3569bc002b86ddd445ade77df60d288fb1c7f73126bac078a451fda364bff9456ca18e411630517540d170050882c74c740f57a3a30e18797420ab319f1cd293
SSDEEP 6144:eBxmR8AVNZiuOJvB0g7ahV1CP90ulNiBMuBNmB6eMiXacRql9dKlTRT2U2dF:OxDSzOj0HhVwPNKM+jaXaR9wJRadF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38333

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileWithProgressA GetModuleHandleW GetTickCount GetNumberFormatA GetConsoleTitleA GetGeoInfoW AllocateUserPhysicalPages GlobalAlloc LoadLibraryW ReadConsoleInputA GetThreadPriorityBoost GetTempPathW GetStartupInfoA GetLastError InterlockedIncrement GetProcAddress VirtualAlloc FreeUserPhysicalPages GetProcessWorkingSetSize GetCommMask AddAtomA FoldStringA GetCurrentProcessId LCMapStringW CopyFileExA GetLocaleInfoW BuildCommDCBAndTimeoutsA SetLastError WriteConsoleOutputCharacterW LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing