file[.]exe | Triage™

General

Target
file.exe
Size 196KB
Sample230211-x4cntsfc2v
SHA256 a076b55ccbcdac667545dea4ef7f6917619af8dcd446d1d9438f347ec752e32a
MD5 d37912d00b0761c1f54477b9e181f360
SHA1 4e4cbd7b7f80e55a3dfd3bc2d41b3ecb454919ad
SHA512 85bd04b71f8dc19580416f74d310e138275943fd632b925a6c3e61f175bfb46a9f633cc9045baf245993328bf6559c4b82cd78db32aa53905f9f2da8eb2401b8
SSDEEP 3072:Kli3+xJl5eDwysLXZ5Lim5lZqKZ8RFqtcsZfVnF/te:q2uJ2rq5mNrvh6JF/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 196KB

file.exe

IMPHASH df780c2deeaea66277dc7a0d5a0f821c
SHA256 a076b55ccbcdac667545dea4ef7f6917619af8dcd446d1d9438f347ec752e32a
MD5 d37912d00b0761c1f54477b9e181f360
SHA1 4e4cbd7b7f80e55a3dfd3bc2d41b3ecb454919ad
SHA512 85bd04b71f8dc19580416f74d310e138275943fd632b925a6c3e61f175bfb46a9f633cc9045baf245993328bf6559c4b82cd78db32aa53905f9f2da8eb2401b8
SSDEEP 3072:Kli3+xJl5eDwysLXZ5Lim5lZqKZ8RFqtcsZfVnF/te:q2uJ2rq5mNrvh6JF/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24130

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetNumberFormatA GetConsoleTitleA GetGeoInfoW CreateActCtxW AllocateUserPhysicalPages LoadLibraryW ReadConsoleInputA GetThreadPriorityBoost GetStartupInfoW GetTempPathW LCMapStringA GetLastError SetLastError GetProcAddress InterlockedIncrement FreeUserPhysicalPages DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize LocalAlloc GetCommMask AddAtomA GetCurrentProcessId MoveFileWithProgressW CopyFileExA BuildCommDCBAndTimeoutsA VirtualAlloc DosDateTimeToFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

LoadMenuA GetMenuInfo

advapi32

DeregisterEventSource ReportEventA

winhttp

WinHttpOpen

Sharing