file[.]exe | Triage™

General

Target
file.exe
Size 283KB
Sample230212-seflzaeg49
SHA256 1b66f5bc2ab88fb6a30d060eadbcadd9acabc3f95670cd58982393372bc2c7ec
MD5 4f09620923bc6a8092952ccb743d76fb
SHA1 90f99f44cb69987a7ca88eb52ebc0ba4dc81500d
SHA512 ad22bac341bca2a7fc38902c01f7a3b4bdd6f1add65ac2f8605682e452436214366e21303f5303637a652a2728ba730c65a7a62b45bdbb8875ea8b22fac5738c
SSDEEP 6144:UTLPgZgzAMeTtPeU9K55GqCHiYwUDZrnc:UnYFMwNQXGqCHxHlrc
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 283KB

file.exe

IMPHASH 66371b98ea4d8c3d9668fd350065be37
SHA256 1b66f5bc2ab88fb6a30d060eadbcadd9acabc3f95670cd58982393372bc2c7ec
MD5 4f09620923bc6a8092952ccb743d76fb
SHA1 90f99f44cb69987a7ca88eb52ebc0ba4dc81500d
SHA512 ad22bac341bca2a7fc38902c01f7a3b4bdd6f1add65ac2f8605682e452436214366e21303f5303637a652a2728ba730c65a7a62b45bdbb8875ea8b22fac5738c
SSDEEP 6144:UTLPgZgzAMeTtPeU9K55GqCHiYwUDZrnc:UnYFMwNQXGqCHxHlrc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24594

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleMouseButtons GetModuleHandleW GetCommConfig GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA DeleteVolumeMountPointW HeapCreate GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetThreadPriorityBoost GetBinaryTypeW GetTempPathW GetStartupInfoA GetLastError SetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize InterlockedIncrement FindFirstVolumeMountPointW GetNumberFormatW CreateEventW FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW GetVersionExA GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar GetNumberOfConsoleInputEvents CopyFileExW SetThreadContext DosDateTimeToFileTime LCMapStringA InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA

user32

IsCharAlphaNumericA DestroyAcceleratorTable IsMenu GetKeyNameTextA NotifyWinEvent RealGetWindowClassA GetFocus LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

winhttp

WinHttpOpen

Sharing