file[.]exe | Triage™

General

Target
file.exe
Size 475KB
Sample230211-pq62hsdb29
SHA256 dde57c1eb8b8e4165da1f55a46b6d30e1d7ee9e66dd48d3f2cce994ba2de2c9f
MD5 328f84e2dda57e3e45cb6bc8c1810f30
SHA1 e41747fb57474ff97ae8ce1e3ab3b4683fb46fa5
SHA512 317d1302cd0035c6cbf341132000fe70079091ae957fc3d2d46f5f4fcb2490b69c9187d95ac634b80ce099c183f515931f97c479aff20cde7e8e4156c5b77bb6
SSDEEP 6144:eBO8Rh0vNGi9pr4cBBUfoTxh+BvylWP5ypl9dKlTRTth4F:OOELV6Bu9ylg5E9wJRf4F
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 475KB

file.exe

IMPHASH fb95de0337b46bfe4941e8d9033bd8db
SHA256 dde57c1eb8b8e4165da1f55a46b6d30e1d7ee9e66dd48d3f2cce994ba2de2c9f
MD5 328f84e2dda57e3e45cb6bc8c1810f30
SHA1 e41747fb57474ff97ae8ce1e3ab3b4683fb46fa5
SHA512 317d1302cd0035c6cbf341132000fe70079091ae957fc3d2d46f5f4fcb2490b69c9187d95ac634b80ce099c183f515931f97c479aff20cde7e8e4156c5b77bb6
SSDEEP 6144:eBO8Rh0vNGi9pr4cBBUfoTxh+BvylWP5ypl9dKlTRTth4F:OOELV6Bu9ylg5E9wJRf4F
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38333

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileWithProgressA GetModuleHandleW GetTickCount GetNumberFormatA GetConsoleTitleA GetGeoInfoW AllocateUserPhysicalPages GlobalAlloc LoadLibraryW ReadConsoleInputA GetThreadPriorityBoost GetTempPathW GetStartupInfoA GetLastError InterlockedIncrement GetProcAddress VirtualAlloc FreeUserPhysicalPages GetProcessWorkingSetSize GetCommMask AddAtomA FoldStringA GetCurrentProcessId LCMapStringW CopyFileExA GetLocaleInfoW BuildCommDCBAndTimeoutsA SetLastError WriteConsoleOutputCharacterW LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing