file[.]exe | Triage™

General

Target
file.exe
Size 289KB
Sample230215-bec3eahc64
SHA256 fdcfaa16fe6d0dee08247a0148ee5c4e21a205be08f681daef921ed8d7a91620
MD5 459d63462c99ea71709654f256f69832
SHA1 3986f100766ceb933b8036b2c866f8b74a9633ce
SHA512 622165bb209de994e9aa1460b7a9a05f4f6abdaf0cb111273c1a838f48fe3f2cb54007f734417fe91b4060dce742c908b74a2efc20c7603fbd2f780f8bd41222
SSDEEP 6144:gLZJU7MSMQD6ZIkCSoLD5Ww7CmYf+2TtFN70Br:gFJtSjLS5+2JF6J
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 289KB

file.exe

IMPHASH 4e0db68663e7214680ba4f7cafdd65a1
SHA256 fdcfaa16fe6d0dee08247a0148ee5c4e21a205be08f681daef921ed8d7a91620
MD5 459d63462c99ea71709654f256f69832
SHA1 3986f100766ceb933b8036b2c866f8b74a9633ce
SHA512 622165bb209de994e9aa1460b7a9a05f4f6abdaf0cb111273c1a838f48fe3f2cb54007f734417fe91b4060dce742c908b74a2efc20c7603fbd2f780f8bd41222
SSDEEP 6144:gLZJU7MSMQD6ZIkCSoLD5Ww7CmYf+2TtFN70Br:gFJtSjLS5+2JF6J
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19720

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement SystemTimeToFileTime SetMailslotInfo GetFileAttributesExA MoveFileWithProgressA GetModuleHandleW GetTickCount GetCurrentThread SetFileShortNameW ReadConsoleInputA CreateEventA GetBinaryTypeA GetGeoInfoA GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetACP GetStartupInfoA GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc DisableThreadLibraryCalls LoadLibraryA DeleteVolumeMountPointA UnhandledExceptionFilter GetProcessWorkingSetSize LocalAlloc IsSystemResumeAutomatic GetNumberFormatW RemoveDirectoryW GetModuleHandleA FindFirstChangeNotificationA HeapSetInformation GetConsoleTitleW GetVersionExA GetVolumeNameForVolumeMountPointW GetCurrentProcessId GetTempPathA CopyFileExA InitializeCriticalSectionAndSpinCount HeapSize HeapReAlloc MapUserPhysicalPages FillConsoleOutputCharacterA GetNumaProcessorNode MultiByteToWideChar TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind GetCPInfo InterlockedDecrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapAlloc HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW LeaveCriticalSection EnterCriticalSection GetLocaleInfoA

user32

GetKeyNameTextW IsChild RealGetWindowClassA LoadMenuA CharUpperA CharLowerBuffW GetCursorInfo CharLowerBuffA ClipCursor

advapi32

LogonUserW ReportEventA IsValidAcl

ole32

CoRevokeMallocSpy

Sharing