file[.]exe | Triage™

General

Target
file.exe
Size 270KB
Sample220204-kceynafge2
SHA256 51461a16ecb5b2d93dab10f4be1aa96c58b20b81bef4f016aee07993e42e232e
MD5 9bcf3747e0194f72bd1c1df335b7a32e
SHA1 0a80568248ac9d61d6f0298dd814f5be163dfcba
SHA512 f38dc0d7fcc1ed951fe7a9daee61963687478916d919c1f7a46b0eb95353156282e3e23a7d5b647448ef130f58659f94716069d0af026b156f8f5f19d0ee5fa2
SSDEEP 6144:/KIHZ0iLdYGLcD4iPGVdhBqDkjL4fJXa:1HZ3JYGLcDbeZgwj
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 270KB

file.exe

IMPHASH 186e4123ea2794f96f74a222cc19a4a9
SHA256 51461a16ecb5b2d93dab10f4be1aa96c58b20b81bef4f016aee07993e42e232e
MD5 9bcf3747e0194f72bd1c1df335b7a32e
SHA1 0a80568248ac9d61d6f0298dd814f5be163dfcba
SHA512 f38dc0d7fcc1ed951fe7a9daee61963687478916d919c1f7a46b0eb95353156282e3e23a7d5b647448ef130f58659f94716069d0af026b156f8f5f19d0ee5fa2
SSDEEP 6144:/KIHZ0iLdYGLcD4iPGVdhBqDkjL4fJXa:1HZ3JYGLcDbeZgwj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13202

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UpdateResourceA InterlockedDecrement SetMailslotInfo SetEvent GetConsoleTitleA CreateRemoteThread GlobalAlloc LoadLibraryW GetLocaleInfoW Sleep GetCalendarInfoA GetVersionExW IsBadStringPtrA GetStringTypeExA LCMapStringA InterlockedExchange GetProcAddress VirtualAlloc SetStdHandle GetAtomNameA LoadLibraryA UnhandledExceptionFilter DnsHostnameToComputerNameA FoldStringA GetModuleFileNameA GetDefaultCommConfigA SetConsoleTitleW GetFileTime SetFileAttributesW DeleteFileA SwitchToThread GetConsoleAliasesLengthW VirtualQuery GetComputerNameA CreateFileA GetLastError HeapFree GetModuleHandleW ExitProcess GetStartupInfoW HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId CloseHandle WriteFile InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage FlushFileBuffers HeapSize GetLocaleInfoA RaiseException WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringW GetStringTypeA GetStringTypeW

gdi32

GetCharWidthFloatA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend

Sharing