file[.]exe | Triage™

General

Target
file.exe
Size 187KB
Sample230212-vreasafd24
SHA256 c5a34f1199c301a8dc06082dc88f68fe474d4d7be6fec55aee4c313499cd86f8
MD5 5a140d2ed4b1e941e728ce70cae5caa7
SHA1 81e5f0bc4ab325dcdf1f5fd69b5b3d0c70dc2267
SHA512 3693e4b91eac95f5c3fb075ecef868f5f2f18a6fb3f3af11bf929d670505079b70768280c69422e01e373026b736871f270065228f8bb0511d1f99afe9288e15
SSDEEP 3072:S7rv+rGc5idt2pAQJYGvy4lwQ51wS6GobDTRzA4m:sjLbdpQqApN51VNoHhA4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 187KB

file.exe

IMPHASH 66371b98ea4d8c3d9668fd350065be37
SHA256 c5a34f1199c301a8dc06082dc88f68fe474d4d7be6fec55aee4c313499cd86f8
MD5 5a140d2ed4b1e941e728ce70cae5caa7
SHA1 81e5f0bc4ab325dcdf1f5fd69b5b3d0c70dc2267
SHA512 3693e4b91eac95f5c3fb075ecef868f5f2f18a6fb3f3af11bf929d670505079b70768280c69422e01e373026b736871f270065228f8bb0511d1f99afe9288e15
SSDEEP 3072:S7rv+rGc5idt2pAQJYGvy4lwQ51wS6GobDTRzA4m:sjLbdpQqApN51VNoHhA4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24594

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleMouseButtons GetModuleHandleW GetCommConfig GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA DeleteVolumeMountPointW HeapCreate GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetThreadPriorityBoost GetBinaryTypeW GetTempPathW GetStartupInfoA GetLastError SetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize InterlockedIncrement FindFirstVolumeMountPointW GetNumberFormatW CreateEventW FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW GetVersionExA GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar GetNumberOfConsoleInputEvents CopyFileExW SetThreadContext DosDateTimeToFileTime LCMapStringA InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA

user32

IsCharAlphaNumericA DestroyAcceleratorTable IsMenu GetKeyNameTextA NotifyWinEvent RealGetWindowClassA GetFocus LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

winhttp

WinHttpOpen

Sharing