file[.]exe | Triage™

General

Target
file.exe
Size 239KB
Sample230211-rgpf8aee8v
SHA256 efedead4bb038abdba0dd233393cf11be42c359870e3cebb0f97d5eb6322c070
MD5 b2071541a08d2c255d2b71e99daea9c4
SHA1 77dfcf048917fba3b1bacd14a7d7982aa0566d15
SHA512 2be38badd90b0c9aa283f0bb8ebd4abbe43937d68321f466c6c434f9b4ffbd37cf3391a1f19a9c5816a6e77d558c139409bc68eb716f4d55adf0bc692f87cf75
SSDEEP 3072:3t5Mf01oh64u7S5BCTmC0NrbGKJP8IUStlwFYSSFRacP:9OceA7KCTmCMBJDUASF/SSc
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 239KB

file.exe

IMPHASH 567ef01db2b6d39e4e9ea86cbe761513
SHA256 efedead4bb038abdba0dd233393cf11be42c359870e3cebb0f97d5eb6322c070
MD5 b2071541a08d2c255d2b71e99daea9c4
SHA1 77dfcf048917fba3b1bacd14a7d7982aa0566d15
SHA512 2be38badd90b0c9aa283f0bb8ebd4abbe43937d68321f466c6c434f9b4ffbd37cf3391a1f19a9c5816a6e77d558c139409bc68eb716f4d55adf0bc692f87cf75
SSDEEP 3072:3t5Mf01oh64u7S5BCTmC0NrbGKJP8IUStlwFYSSFRacP:9OceA7KCTmCMBJDUASF/SSc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetModuleHandleW GetNumberFormatA GetConsoleTitleA GetGeoInfoW CreateActCtxW AllocateUserPhysicalPages LoadLibraryW ReadConsoleInputA GetThreadPriorityBoost GetStartupInfoW GetTempPathW LCMapStringA GetLastError SetLastError BuildCommDCBAndTimeoutsA VirtualAlloc FreeUserPhysicalPages GetProcessWorkingSetSize LocalAlloc GetCommMask AddAtomA FoldStringA GetCurrentProcessId MoveFileWithProgressW CopyFileExA GetLocaleInfoW WriteConsoleOutputCharacterW GetProcAddress DosDateTimeToFileTime LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing