file[.]exe | Triage™

General

Target
file.exe
Size 277KB
Sample230213-bec3eahb3s
SHA256 99c89da9e496f81332c02c82f4a294dd4b23525aa37ea859b3b926d1f16c7762
MD5 2acdb12641f94a1c65944502ef5c2db3
SHA1 99d52ae3bbe9d0311c4f46fe8cd96d59437f9753
SHA512 4897191bfcd49031958a52542e655363ebdfcf1d626c1a41dff341e40d7d75c2907b47116435edf72f36904eb9f28d86409a29719b2bf144a4e18c0ad532e6a8
SSDEEP 3072:BUcZlyk5HVKYLoxQqO9Hnn05qHlXXoqKoXhe/H/Cb23VKN4XAsJzmg0Z5IbIqepq:vCS2O9uiXvPXU+23VZCknPSf50Bd
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 277KB

file.exe

IMPHASH 1ec118ddc3b50693168adb7f3df7b684
SHA256 99c89da9e496f81332c02c82f4a294dd4b23525aa37ea859b3b926d1f16c7762
MD5 2acdb12641f94a1c65944502ef5c2db3
SHA1 99d52ae3bbe9d0311c4f46fe8cd96d59437f9753
SHA512 4897191bfcd49031958a52542e655363ebdfcf1d626c1a41dff341e40d7d75c2907b47116435edf72f36904eb9f28d86409a29719b2bf144a4e18c0ad532e6a8
SSDEEP 3072:BUcZlyk5HVKYLoxQqO9Hnn05qHlXXoqKoXhe/H/Cb23VKN4XAsJzmg0Z5IbIqepq:vCS2O9uiXvPXU+23VZCknPSf50Bd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20449

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetTickCount GetCommConfig GetCurrentThread GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA DeleteVolumeMountPointW HeapCreate GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetBinaryTypeW GetTempPathW GetStartupInfoA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize CreateEventW FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW RequestWakeupLatency GetVersionExA GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar GetNumberOfConsoleMouseButtons InterlockedIncrement FindFirstVolumeMountPointW CopyFileExW LCMapStringA InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA

user32

IsCharAlphaNumericA DestroyAcceleratorTable RealChildWindowFromPoint IsMenu GetKeyNameTextA NotifyWinEvent RealGetWindowClassA LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

ole32

CoRegisterMallocSpy

Sharing