file[.]exe | Triage™

General

Target
file.exe
Size 293KB
Sample230212-cgppnabc86
SHA256 f0a6c814624edcedfa89ce88ad62383ea4a00f389ee9e789a0fb241eb1f65067
MD5 8b6487416b0612c73143ff6949d1d094
SHA1 e6c0a5b9060ec953ac5e819cbefe9ed76b309d24
SHA512 9567d030bdd1e7eb4c7880d3e30610dc1e806320bbd082a6766149285d941fb4cecdb3a8111952dfb95892f2cdef78a0022654dd400f76cb93249b1e26b7a0d9
SSDEEP 6144:uGERGQvsv/JdwTohyzdWxL8rnV0MiBgbmY3Om03O6SvwEVH:uG62fwTPWxqV7M69NRV
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 293KB

file.exe

IMPHASH 436b8e1a5416018622ed4c6d96d64f2f
SHA256 f0a6c814624edcedfa89ce88ad62383ea4a00f389ee9e789a0fb241eb1f65067
MD5 8b6487416b0612c73143ff6949d1d094
SHA1 e6c0a5b9060ec953ac5e819cbefe9ed76b309d24
SHA512 9567d030bdd1e7eb4c7880d3e30610dc1e806320bbd082a6766149285d941fb4cecdb3a8111952dfb95892f2cdef78a0022654dd400f76cb93249b1e26b7a0d9
SSDEEP 6144:uGERGQvsv/JdwTohyzdWxL8rnV0MiBgbmY3Om03O6SvwEVH:uG62fwTPWxqV7M69NRV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24658

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

BuildCommDCBAndTimeoutsA InterlockedIncrement GetNumberOfConsoleMouseButtons GetModuleHandleW GetCommConfig GetGeoInfoW AllocateUserPhysicalPages LoadLibraryW ReadConsoleInputA CreateEventA GetVersionExW GetMailslotInfo CreateActCtxA GetThreadPriorityBoost GetStartupInfoW GetTempPathW GetLastError SetLastError GetProcAddress VirtualAlloc FreeUserPhysicalPages DisableThreadLibraryCalls ProcessIdToSessionId GetNumberOfConsoleInputEvents LocalAlloc GetNumberFormatW AddAtomW GetCommMask ContinueDebugEvent HeapSetInformation GetConsoleTitleW GetFileAttributesExW GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar CopyFileExW SetThreadContext DosDateTimeToFileTime GetProcessWorkingSetSize DebugActiveProcess LCMapStringA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

LoadMenuA DestroyAcceleratorTable IsMenu NotifyWinEvent RealGetWindowClassA GetFocus IsCharAlphaNumericA RemovePropA CharUpperW CharLowerBuffA ClipCursor GetMenuInfo

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

winhttp

WinHttpOpen

Sharing