file[.]exe | Triage™

General

Target
file.exe
Size 196KB
Sample230212-a9wbsshb38
SHA256 a81f478a99eaf2884fc897843f4b5910f9ae1faf65d01465218fdac4492fa432
MD5 b9c82d6f88eeeca3dffd3cf354a945fc
SHA1 b47f7d20e01676a13e7185d2b7b765111e5639b3
SHA512 be78c35b55b85b47ecf92401af57546ecb82efc6f5da532c14d66caa9d056433e5d8bdf2349f5ac9e393c22aafae73ef30c26c24352a54fd87c868f8243f9e21
SSDEEP 3072:2jqG7+0JuoZj5C1jdljr781+PvHrzNQv4rtG:2GiRc1Z5r7fPvHrzKv4r
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 196KB

file.exe

IMPHASH 436b8e1a5416018622ed4c6d96d64f2f
SHA256 a81f478a99eaf2884fc897843f4b5910f9ae1faf65d01465218fdac4492fa432
MD5 b9c82d6f88eeeca3dffd3cf354a945fc
SHA1 b47f7d20e01676a13e7185d2b7b765111e5639b3
SHA512 be78c35b55b85b47ecf92401af57546ecb82efc6f5da532c14d66caa9d056433e5d8bdf2349f5ac9e393c22aafae73ef30c26c24352a54fd87c868f8243f9e21
SSDEEP 3072:2jqG7+0JuoZj5C1jdljr781+PvHrzNQv4rtG:2GiRc1Z5r7fPvHrzKv4r
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24658

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

BuildCommDCBAndTimeoutsA InterlockedIncrement GetNumberOfConsoleMouseButtons GetModuleHandleW GetCommConfig GetGeoInfoW AllocateUserPhysicalPages LoadLibraryW ReadConsoleInputA CreateEventA GetVersionExW GetMailslotInfo CreateActCtxA GetThreadPriorityBoost GetStartupInfoW GetTempPathW GetLastError SetLastError GetProcAddress VirtualAlloc FreeUserPhysicalPages DisableThreadLibraryCalls ProcessIdToSessionId GetNumberOfConsoleInputEvents LocalAlloc GetNumberFormatW AddAtomW GetCommMask ContinueDebugEvent HeapSetInformation GetConsoleTitleW GetFileAttributesExW GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar CopyFileExW SetThreadContext DosDateTimeToFileTime GetProcessWorkingSetSize DebugActiveProcess LCMapStringA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

LoadMenuA DestroyAcceleratorTable IsMenu NotifyWinEvent RealGetWindowClassA GetFocus IsCharAlphaNumericA RemovePropA CharUpperW CharLowerBuffA ClipCursor GetMenuInfo

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

winhttp

WinHttpOpen

Sharing