file[.]exe | Triage™

General

Target
file.exe
Size 188KB
Sample230212-prrm8add5t
SHA256 0e5f0963d42bfd515cf3ca185eb9ab899e12e903a80e81766256ee3ff26d0d87
MD5 0f1d7832a61f69b5d6434d3ab3fc29b9
SHA1 b905e329f5ecf64d68801a2483a112d2d742fc04
SHA512 8ed8596231708e7bfa1760b0ad6372970eb0fe12ce30184eeffe1c982ff630ddbbfebc205ad4f100cc7a0aab651f1e0f8dd9af3014b7916251ec7d193f698ea0
SSDEEP 3072:J7Rr+rG7O56ZHILe5cyrGd89g5DBF9qrFReJ/RqU9DN7:9JL7FZoSz6ey9Q7evnx
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 188KB

file.exe

IMPHASH ea0c0f223b6ece290ece4f678a133da5
SHA256 0e5f0963d42bfd515cf3ca185eb9ab899e12e903a80e81766256ee3ff26d0d87
MD5 0f1d7832a61f69b5d6434d3ab3fc29b9
SHA1 b905e329f5ecf64d68801a2483a112d2d742fc04
SHA512 8ed8596231708e7bfa1760b0ad6372970eb0fe12ce30184eeffe1c982ff630ddbbfebc205ad4f100cc7a0aab651f1e0f8dd9af3014b7916251ec7d193f698ea0
SSDEEP 3072:J7Rr+rG7O56ZHILe5cyrGd89g5DBF9qrFReJ/RqU9DN7:9JL7FZoSz6ey9Q7evnx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24594

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetNumberOfConsoleMouseButtons GetModuleHandleW GetCommConfig GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA DeleteVolumeMountPointW GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetThreadPriorityBoost GetBinaryTypeW GetTempPathW GetStartupInfoA GetLastError SetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize GetNumberOfConsoleInputEvents FindFirstVolumeMountPointW GetNumberFormatW CreateEventW FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW GetVersionExA GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar CopyFileExW GetNativeSystemInfo SetThreadContext DosDateTimeToFileTime LCMapStringA InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA

user32

IsCharAlphaNumericA DestroyAcceleratorTable IsMenu GetKeyNameTextA NotifyWinEvent RealGetWindowClassA GetFocus LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

winhttp

WinHttpOpen

Sharing