file[.]exe | Triage™

General

Target
file.exe
Size 236KB
Sample230211-qc8hvsda4s
SHA256 323dcfac8ae69cf2244cd5c5d343eddc357aef1dc90521b43bf7798480a32e70
MD5 8f3176611f8ff419379acf1766a74a0d
SHA1 94f395d5c0a2c18adf26fb917b7aa1d0b9eae4a2
SHA512 6b78a0c9daa65e7b28cab03a5706c54b32b50738d36ebf674fe1ffe4f630757dff6ac3df4a1d84c87d8adc4162a65d5d3bdf82c3465e385e9fae0aeec56ab8ec
SSDEEP 3072:itgHXn41ohUYpVTS5BrpuT830qVS+AvyzjXTJ9NltEyvee68cP:GuX4e3TK1g83pyyHXzNltxvn68c
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 236KB

file.exe

IMPHASH 567ef01db2b6d39e4e9ea86cbe761513
SHA256 323dcfac8ae69cf2244cd5c5d343eddc357aef1dc90521b43bf7798480a32e70
MD5 8f3176611f8ff419379acf1766a74a0d
SHA1 94f395d5c0a2c18adf26fb917b7aa1d0b9eae4a2
SHA512 6b78a0c9daa65e7b28cab03a5706c54b32b50738d36ebf674fe1ffe4f630757dff6ac3df4a1d84c87d8adc4162a65d5d3bdf82c3465e385e9fae0aeec56ab8ec
SSDEEP 3072:itgHXn41ohUYpVTS5BrpuT830qVS+AvyzjXTJ9NltEyvee68cP:GuX4e3TK1g83pyyHXzNltxvn68c
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetModuleHandleW GetNumberFormatA GetConsoleTitleA GetGeoInfoW CreateActCtxW AllocateUserPhysicalPages LoadLibraryW ReadConsoleInputA GetThreadPriorityBoost GetStartupInfoW GetTempPathW LCMapStringA GetLastError SetLastError BuildCommDCBAndTimeoutsA VirtualAlloc FreeUserPhysicalPages GetProcessWorkingSetSize LocalAlloc GetCommMask AddAtomA FoldStringA GetCurrentProcessId MoveFileWithProgressW CopyFileExA GetLocaleInfoW WriteConsoleOutputCharacterW GetProcAddress DosDateTimeToFileTime LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing