file[.]exe | Triage™

General

Target
file.exe
Size 188KB
Sample230212-ry5vjaef39
SHA256 d4d68aae0611fb7905294b5bcb68b607d9c7064791cfa615f17c7ee779be038c
MD5 713639c7b80d8a8999b5dafd001295d3
SHA1 fc86cfb41f097989fd1dd7f367c97cae0eb4f4d9
SHA512 8f093bd88531d8ad51d38dd65c2f86a9504c6b8baeae420063c177be165b457a5cd3aa056a4d6ce62cdbce1e3103a3356a6e8ce484107a0ed39ba350eed6a4ea
SSDEEP 3072:l7j8+rG6U565PSTqe7lQ9MxP4cG2YwGQsKWQINYUzM2eExzNYChV:h4Ly5a2OdvXDyJ/xv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 188KB

file.exe

IMPHASH ea0c0f223b6ece290ece4f678a133da5
SHA256 d4d68aae0611fb7905294b5bcb68b607d9c7064791cfa615f17c7ee779be038c
MD5 713639c7b80d8a8999b5dafd001295d3
SHA1 fc86cfb41f097989fd1dd7f367c97cae0eb4f4d9
SHA512 8f093bd88531d8ad51d38dd65c2f86a9504c6b8baeae420063c177be165b457a5cd3aa056a4d6ce62cdbce1e3103a3356a6e8ce484107a0ed39ba350eed6a4ea
SSDEEP 3072:l7j8+rG6U565PSTqe7lQ9MxP4cG2YwGQsKWQINYUzM2eExzNYChV:h4Ly5a2OdvXDyJ/xv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24594

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetNumberOfConsoleMouseButtons GetModuleHandleW GetCommConfig GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA DeleteVolumeMountPointW GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetThreadPriorityBoost GetBinaryTypeW GetTempPathW GetStartupInfoA GetLastError SetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize GetNumberOfConsoleInputEvents FindFirstVolumeMountPointW GetNumberFormatW CreateEventW FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW GetVersionExA GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar CopyFileExW GetNativeSystemInfo SetThreadContext DosDateTimeToFileTime LCMapStringA InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA

user32

IsCharAlphaNumericA DestroyAcceleratorTable IsMenu GetKeyNameTextA NotifyWinEvent RealGetWindowClassA GetFocus LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

winhttp

WinHttpOpen

Sharing