file[.]exe | Triage™

General

Target
file.exe
Size 283KB
Sample230212-np187sda9z
SHA256 ebc4c541aab0b1aea85b33a1972534c3ff3f14dbd5822dc3ea99e7b688f4edc7
MD5 369106594773c80b1809e90cc62f0288
SHA1 656e03fd2c609e2d753b8275c1d451dd0536be06
SHA512 47a3123958cee23e2404a6d605497aec45c111621b79aba35a86498d23e903461226b3c43bf0da87de168b9c607e6307fc6b1695cdf477c5e423a1261c2d750e
SSDEEP 6144:2oFJjLov0xeWgfMIII58MeID0r6oTiguFKMu:2CLHeWZI5jDK6silFKM
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 283KB

file.exe

IMPHASH cb88fc21f0a7aa72c882b8c1994959da
SHA256 ebc4c541aab0b1aea85b33a1972534c3ff3f14dbd5822dc3ea99e7b688f4edc7
MD5 369106594773c80b1809e90cc62f0288
SHA1 656e03fd2c609e2d753b8275c1d451dd0536be06
SHA512 47a3123958cee23e2404a6d605497aec45c111621b79aba35a86498d23e903461226b3c43bf0da87de168b9c607e6307fc6b1695cdf477c5e423a1261c2d750e
SSDEEP 6144:2oFJjLov0xeWgfMIII58MeID0r6oTiguFKMu:2CLHeWZI5jDK6silFKM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24585

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetNumberOfConsoleMouseButtons GetModuleHandleW GetCommConfig GetGeoInfoW LoadLibraryW ReadConsoleInputA GetVersionExW DeleteVolumeMountPointW GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetThreadPriorityBoost GetBinaryTypeW GetTempPathW GetStartupInfoA GetLastError SetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize GetNumberOfConsoleInputEvents FindFirstVolumeMountPointW GetNumberFormatW CreateEventW GetCommMask FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW LCMapStringA GetStringTypeW MultiByteToWideChar GetStringTypeA GetLocaleInfoA CopyFileExW SetThreadContext DosDateTimeToFileTime LocalAlloc DebugActiveProcess InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA

user32

IsCharAlphaNumericA DestroyAcceleratorTable IsMenu GetKeyNameTextA NotifyWinEvent RealGetWindowClassA GetFocus LoadMenuA CharUpperW CharLowerBuffA ClipCursor GetMenuInfo

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

winhttp

WinHttpOpen

Sharing