file[.]exe | Triage™

General

Target
file.exe
Size 279KB
Sample220829-p7g4qahebl
SHA256 302ca1dafea52c0039cbc171712eef95339daf45d441e669c18d629826343638
MD5 cbfb38108965fc180773854a4e8adbff
SHA1 e3ca0a89c87395ce6f3e34add16effad74830a2d
SHA512 f584b64e4dea370e24b4a4112a61128f4e97a3a39837974cc570e8cb49666f7d482ce1de1afa8e8dd496a071526872b976f2227e46c04c16713708ba98dc8f79
SSDEEP 3072:PXhR6Jc57EO47qq9ZaUtquOHrzquoN0alnRWzd0:/+c57t4X9ZaFvfq50aNRWzd0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 279KB

file.exe

IMPHASH 05c33101aaeec891beca386c38cc85fb
SHA256 302ca1dafea52c0039cbc171712eef95339daf45d441e669c18d629826343638
MD5 cbfb38108965fc180773854a4e8adbff
SHA1 e3ca0a89c87395ce6f3e34add16effad74830a2d
SHA512 f584b64e4dea370e24b4a4112a61128f4e97a3a39837974cc570e8cb49666f7d482ce1de1afa8e8dd496a071526872b976f2227e46c04c16713708ba98dc8f79
SSDEEP 3072:PXhR6Jc57EO47qq9ZaUtquOHrzquoN0alnRWzd0:/+c57t4X9ZaFvfq50aNRWzd0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22981

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetWaitableTimer WaitNamedPipeA CommConfigDialogW SetSystemTimeAdjustment SearchPathA EnumResourceTypesA GetCPInfoExA EnumResourceTypesW GetModuleFileNameA WriteConsoleOutputCharacterW GetConsoleAliasesLengthA DeleteFileA FillConsoleOutputCharacterW LocalAlloc GetProcAddress GetModuleHandleW AddRefActCtx GetConsoleAliasW FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesA SearchPathW lstrcpynA AddAtomA GetConsoleAliasesLengthW FreeConsole GetComputerNameExW FindNextFileW SetPriorityClass BuildCommDCBAndTimeoutsW OpenJobObjectW InitializeCriticalSection FindResourceExW SetConsoleMode _lclose SetCommMask GetConsoleTitleW CreateDirectoryExA FoldStringA HeapAlloc HeapSize LoadLibraryW HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer RaiseException SetUnhandledExceptionFilter ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection EnterCriticalSection HeapFree Sleep RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW

user32

ClientToScreen ScreenToClient

advapi32

BackupEventLogW CloseEventLog GetNumberOfEventLogRecords GetEventLogInformation

winhttp

WinHttpReadData WinHttpSetTimeouts

Sharing