file[.]exe | Triage™

General

Target
file.exe
Size 291KB
Sample230218-tj267scf66
SHA256 5878e738c8b3e36e7b1778ba14f8a00766f079d9c7555d9de2a01f633d7dbf37
MD5 23d656a149c2858db13a5e15b9cb40ee
SHA1 4d74820df4ba129f8661143ec4b488f9aa1dcc19
SHA512 699bb90304f0fa09cdd54ed75274887b9a3e99c247d9bbce1637919d39d336b524e54f95c9f66e2164bf2b0179dced64a57e6357f4704844916d0fb87cbb4d52
SSDEEP 6144:o7r6LhonXq02R1lzaCZ9BaURjOrkMpgamtw6:oP6tonXNI1lzag9BlF3MRmT
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 291KB

file.exe

IMPHASH 81831dbd0bb62ee86f0858d78363b4f1
SHA256 5878e738c8b3e36e7b1778ba14f8a00766f079d9c7555d9de2a01f633d7dbf37
MD5 23d656a149c2858db13a5e15b9cb40ee
SHA1 4d74820df4ba129f8661143ec4b488f9aa1dcc19
SHA512 699bb90304f0fa09cdd54ed75274887b9a3e99c247d9bbce1637919d39d336b524e54f95c9f66e2164bf2b0179dced64a57e6357f4704844916d0fb87cbb4d52
SSDEEP 6144:o7r6LhonXq02R1lzaCZ9BaURjOrkMpgamtw6:oP6tonXNI1lzag9BlF3MRmT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24566

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW GetModuleHandleExA GetCPInfo MoveFileWithProgressA GetConsoleAliasesA GetGeoInfoW SetFileShortNameW LoadLibraryW GetConsoleAliasExesLengthW GetVersionExW DeleteVolumeMountPointW GetFileAttributesW GetMailslotInfo CreateActCtxA GetBinaryTypeW GetACP FindNextVolumeMountPointW SetTapePosition InterlockedExchange GetLastError GetProcAddress VirtualAlloc FreeUserPhysicalPages GetNumaHighestNodeNumber OpenWaitableTimerA WriteConsoleA UnhandledExceptionFilter GetProcessWorkingSetSize InterlockedExchangeAdd LocalAlloc GetNumberFormatW RemoveDirectoryW GetDiskFreeSpaceA OpenJobObjectW GetModuleHandleA HeapSetInformation EraseTape GetStringTypeW GetConsoleTitleW FatalAppExitA GetCurrentProcessId InitializeCriticalSectionAndSpinCount LoadLibraryA HeapReAlloc GetLocaleInfoA MultiByteToWideChar TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapAlloc HeapFree Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA LeaveCriticalSection EnterCriticalSection

user32

CopyAcceleratorTableA SetCaretPos GetKeyNameTextW CharLowerBuffA IsChild RealGetWindowClassA LoadMenuA CharUpperBuffA GetCursorInfo CharUpperW

ole32

ReadClassStg CoUninitialize

winhttp

WinHttpSetDefaultProxyConfiguration

Sharing