file[.]exe | Triage™

General

Target
file.exe
Size 239KB
Sample230211-vqv7xada84
SHA256 8acd324801adf533ff70e832dca08b8c9d7ea3ff7619466cf0f2df807a773809
MD5 45393c680bf84954face9b1bc972c02f
SHA1 d44a815c9cef288b5ad4c8b2cab7c6ad702d7494
SHA512 7c4cf6e2743e7e9c52798446596c5456fd1d10136bf4e19754f3a87fe440b607c9db7d139175decca80e8727518895941e177725c2a0f6e56c6528fa12855b6e
SSDEEP 3072:6tCzfT1ohcAIe5AS5Bj9nfq8NfSZeAyVxnwctOP:OqbeECAKxxNrAenwcw
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 239KB

file.exe

IMPHASH 567ef01db2b6d39e4e9ea86cbe761513
SHA256 8acd324801adf533ff70e832dca08b8c9d7ea3ff7619466cf0f2df807a773809
MD5 45393c680bf84954face9b1bc972c02f
SHA1 d44a815c9cef288b5ad4c8b2cab7c6ad702d7494
SHA512 7c4cf6e2743e7e9c52798446596c5456fd1d10136bf4e19754f3a87fe440b607c9db7d139175decca80e8727518895941e177725c2a0f6e56c6528fa12855b6e
SSDEEP 3072:6tCzfT1ohcAIe5AS5Bj9nfq8NfSZeAyVxnwctOP:OqbeECAKxxNrAenwcw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetModuleHandleW GetNumberFormatA GetConsoleTitleA GetGeoInfoW CreateActCtxW AllocateUserPhysicalPages LoadLibraryW ReadConsoleInputA GetThreadPriorityBoost GetStartupInfoW GetTempPathW LCMapStringA GetLastError SetLastError BuildCommDCBAndTimeoutsA VirtualAlloc FreeUserPhysicalPages GetProcessWorkingSetSize LocalAlloc GetCommMask AddAtomA FoldStringA GetCurrentProcessId MoveFileWithProgressW CopyFileExA GetLocaleInfoW WriteConsoleOutputCharacterW GetProcAddress DosDateTimeToFileTime LoadLibraryA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing