sample[.]exe | Triage™

General

Target
sample.exe
Size 246KB
Sample230317-dplteagb2x
SHA256 dfb1707c43b702b1e42ce3ded92929aba1ba5a4e58541da459497a3b35a27490
MD5 0fa551d62828473aaff743ecdc500a9f
SHA1 3f89cb13c3a70e65ee631182f5826dfca806616d
SHA512 9089aea85e5c859e986abdcb9b2b995bbdd5c6d3f0737bdf6cb380b6f7807624bdfbcfa935e732036b2d78dca627fab3eaaf6c2f7fa53f958157ac098122a678
SSDEEP 6144:JrqrZzeOqSGgud1gtSPQO20K463ccpwhhvJ:JrqrpLGgS1TYO203S/pu
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

sample.exe

.exe 246KB

sample.exe

IMPHASH 4b2faf5e2157c756cf2fd31d6cfd3d44
SHA256 dfb1707c43b702b1e42ce3ded92929aba1ba5a4e58541da459497a3b35a27490
MD5 0fa551d62828473aaff743ecdc500a9f
SHA1 3f89cb13c3a70e65ee631182f5826dfca806616d
SHA512 9089aea85e5c859e986abdcb9b2b995bbdd5c6d3f0737bdf6cb380b6f7807624bdfbcfa935e732036b2d78dca627fab3eaaf6c2f7fa53f958157ac098122a678
SSDEEP 6144:JrqrZzeOqSGgud1gtSPQO20K463ccpwhhvJ:JrqrpLGgS1TYO203S/pu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12049

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA _llseek GetConsoleAliasA InterlockedCompareExchange SleepEx GetWindowsDirectoryA EnumTimeFormatsW WriteFileGather EnumResourceTypesA ActivateActCtx GlobalAlloc GetFirmwareEnvironmentVariableA LoadLibraryW TerminateThread CreateEventA LeaveCriticalSection GetFileAttributesW WritePrivateProfileSectionW lstrcmpW GlobalUnlock SetDefaultCommConfigA SetLastError GetProcAddress CopyFileA GlobalGetAtomNameA OpenWaitableTimerA AddAtomA FindNextFileA FindFirstVolumeMountPointA GetModuleHandleA FindNextFileW GetConsoleCursorInfo GetShortPathNameW GetCPInfoExA SetCalendarInfoA ReadConsoleInputW EnumCalendarInfoExA LocalFree CopyFileExA RaiseException PulseEvent GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

advapi32

LookupAccountSidW

Sharing