file[.]exe | Triage™

General

Target
file.exe
Size 293KB
Sample230212-grfxqagg6t
SHA256 ee8f0e850243a2aef508e5a14f8495d3aca0e9d88c0a059eb085357c543f55d2
MD5 c8388338f5bee030e017a7860f8cc2c4
SHA1 6effcd6c6b4e2fd78ce5b7d0b2b1b4ec7f6d71d2
SHA512 361ae44f51176d4dbfb3080d430c9a70a46c3e47b817f6c934d7d3953eca686e3a97426b3bf8f955d33d895d8efaa59d7a47a5790e7f0ef7bedd5b63bfed93c0
SSDEEP 3072:dje77+d5V5CuOtU3efzJ7Ox1hjBM95X8MDev7gXHQks0Z0Ih9jCK9f3qj1xRK28v:difCquOUWJ01rweeY7kQksK9/9ClX
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 293KB

file.exe

IMPHASH 436b8e1a5416018622ed4c6d96d64f2f
SHA256 ee8f0e850243a2aef508e5a14f8495d3aca0e9d88c0a059eb085357c543f55d2
MD5 c8388338f5bee030e017a7860f8cc2c4
SHA1 6effcd6c6b4e2fd78ce5b7d0b2b1b4ec7f6d71d2
SHA512 361ae44f51176d4dbfb3080d430c9a70a46c3e47b817f6c934d7d3953eca686e3a97426b3bf8f955d33d895d8efaa59d7a47a5790e7f0ef7bedd5b63bfed93c0
SSDEEP 3072:dje77+d5V5CuOtU3efzJ7Ox1hjBM95X8MDev7gXHQks0Z0Ih9jCK9f3qj1xRK28v:difCquOUWJ01rweeY7kQksK9/9ClX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24674

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

BuildCommDCBAndTimeoutsA InterlockedIncrement GetNumberOfConsoleMouseButtons GetModuleHandleW GetCommConfig GetGeoInfoW AllocateUserPhysicalPages LoadLibraryW ReadConsoleInputA CreateEventA GetVersionExW GetMailslotInfo CreateActCtxA GetThreadPriorityBoost GetStartupInfoW GetTempPathW GetLastError SetLastError GetProcAddress VirtualAlloc FreeUserPhysicalPages DisableThreadLibraryCalls ProcessIdToSessionId GetNumberOfConsoleInputEvents LocalAlloc GetNumberFormatW AddAtomW GetCommMask ContinueDebugEvent HeapSetInformation GetConsoleTitleW GetFileAttributesExW GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar CopyFileExW SetThreadContext DosDateTimeToFileTime GetProcessWorkingSetSize DebugActiveProcess LCMapStringA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

LoadMenuA DestroyAcceleratorTable IsMenu NotifyWinEvent RealGetWindowClassA GetFocus IsCharAlphaNumericA RemovePropA CharUpperW CharLowerBuffA ClipCursor GetMenuInfo

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

winhttp

WinHttpOpen

Sharing