file[.]exe | Triage™

General

Target
file.exe
Size 187KB
Sample230212-tt83hafa98
SHA256 e58277ef012927b9d2edceb826ec6150a81ec6ddc91ef8c82761f38102727c49
MD5 9a3375c7b1bf70cf646e5bffe22ae974
SHA1 aa56b0b7ffa8968b9a6aa762365d673d27db8580
SHA512 99ee75ce53e96e8fd94caef0806d00402dbb4a27ea655f51988b8982dee5772c9f8b315c92c96a3cfc639fa4f1646bbf280626f6023c0620cf320d7a08b4ff38
SSDEEP 3072:A733+rGt5iRkedWWOHFJ4HkEtkeYoJSZGT20oLxy2jiSqE:CnLCRxHOHFJ4q+SZE3oLg2GSq
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 187KB

file.exe

IMPHASH 66371b98ea4d8c3d9668fd350065be37
SHA256 e58277ef012927b9d2edceb826ec6150a81ec6ddc91ef8c82761f38102727c49
MD5 9a3375c7b1bf70cf646e5bffe22ae974
SHA1 aa56b0b7ffa8968b9a6aa762365d673d27db8580
SHA512 99ee75ce53e96e8fd94caef0806d00402dbb4a27ea655f51988b8982dee5772c9f8b315c92c96a3cfc639fa4f1646bbf280626f6023c0620cf320d7a08b4ff38
SSDEEP 3072:A733+rGt5iRkedWWOHFJ4HkEtkeYoJSZGT20oLxy2jiSqE:CnLCRxHOHFJ4q+SZE3oLg2GSq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24594

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleMouseButtons GetModuleHandleW GetCommConfig GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA DeleteVolumeMountPointW HeapCreate GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetThreadPriorityBoost GetBinaryTypeW GetTempPathW GetStartupInfoA GetLastError SetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize InterlockedIncrement FindFirstVolumeMountPointW GetNumberFormatW CreateEventW FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW GetVersionExA GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar GetNumberOfConsoleInputEvents CopyFileExW SetThreadContext DosDateTimeToFileTime LCMapStringA InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA

user32

IsCharAlphaNumericA DestroyAcceleratorTable IsMenu GetKeyNameTextA NotifyWinEvent RealGetWindowClassA GetFocus LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

winhttp

WinHttpOpen

Sharing