file[.]exe | Triage™

General

Target
file.exe
Size 378KB
Sample230211-n2axsabf89
SHA256 c3a94e02fa9adeba6347f8ebc770b0b82395485fef662e71a7dcd11f2e11fa01
MD5 d01e310f01d0f2f29ca6eb0c009d0d07
SHA1 eb2dea402aa13e67a81092c4dcad9d518ff322b0
SHA512 bc3259a9055101a74cd50e5268bc9e25dd0719bf1e16994b857e1e71b938aeb5abe9a44f0f39e866f8dc357bdcab5b40bd24f6cfa1ae10f714b5054ef8ccf163
SSDEEP 6144:nBkXRj/KdNciKPfSv8uUpnv6AK/l9dKlTRTV22dF:BkdBSUpnS59wJRpHdF
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 378KB

file.exe

IMPHASH fb95de0337b46bfe4941e8d9033bd8db
SHA256 c3a94e02fa9adeba6347f8ebc770b0b82395485fef662e71a7dcd11f2e11fa01
MD5 d01e310f01d0f2f29ca6eb0c009d0d07
SHA1 eb2dea402aa13e67a81092c4dcad9d518ff322b0
SHA512 bc3259a9055101a74cd50e5268bc9e25dd0719bf1e16994b857e1e71b938aeb5abe9a44f0f39e866f8dc357bdcab5b40bd24f6cfa1ae10f714b5054ef8ccf163
SSDEEP 6144:nBkXRj/KdNciKPfSv8uUpnv6AK/l9dKlTRTV22dF:BkdBSUpnS59wJRpHdF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38333

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileWithProgressA GetModuleHandleW GetTickCount GetNumberFormatA GetConsoleTitleA GetGeoInfoW AllocateUserPhysicalPages GlobalAlloc LoadLibraryW ReadConsoleInputA GetThreadPriorityBoost GetTempPathW GetStartupInfoA GetLastError InterlockedIncrement GetProcAddress VirtualAlloc FreeUserPhysicalPages GetProcessWorkingSetSize GetCommMask AddAtomA FoldStringA GetCurrentProcessId LCMapStringW CopyFileExA GetLocaleInfoW BuildCommDCBAndTimeoutsA SetLastError WriteConsoleOutputCharacterW LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing