file[.]exe | Triage™

General

Target
file.exe
Size 332KB
Sample220905-nat7cafhej
SHA256 7cd1004c39e5d4900edc81bdd111f19fd134fae048b559a4bee00b5353bcab39
MD5 5a1e67969fb86b19f84b697ab4c76604
SHA1 73915ee0999863c64c47aa2abd429b79cafe2da5
SHA512 1891209cd13063364452c85db66304ba01064ce47df02f49aa9fce0c35a02d46900de5f6ef0403234ab6c9041e52e1115cee015c820fa127e59f6a3bb5603ed1
SSDEEP 3072:WJFXvFFotGbl7cUULPhqpoKCHJ9Xp3HkQmv9ftdOkNcpArLzKvbU0+:SdWGZgUULZehC5HSnOkLEwl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 332KB

file.exe

IMPHASH db1fe82f13f1f0edd6ba4e6134f49ca5
SHA256 7cd1004c39e5d4900edc81bdd111f19fd134fae048b559a4bee00b5353bcab39
MD5 5a1e67969fb86b19f84b697ab4c76604
SHA1 73915ee0999863c64c47aa2abd429b79cafe2da5
SHA512 1891209cd13063364452c85db66304ba01064ce47df02f49aa9fce0c35a02d46900de5f6ef0403234ab6c9041e52e1115cee015c820fa127e59f6a3bb5603ed1
SSDEEP 3072:WJFXvFFotGbl7cUULPhqpoKCHJ9Xp3HkQmv9ftdOkNcpArLzKvbU0+:SdWGZgUULZehC5HSnOkLEwl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23793

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringW OpenWaitableTimerA WaitNamedPipeA CommConfigDialogW GetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetCPInfoExA EnumResourceTypesA GetModuleFileNameW WriteConsoleOutputCharacterA GetConsoleAliasesLengthA DeleteFileW FillConsoleOutputCharacterW GetProcAddress VirtualAlloc LoadLibraryA ReleaseActCtx GetConsoleAliasA FindFirstChangeNotificationW GetModuleHandleA EnumResourceNamesW UnlockFileEx lstrcpynA AddAtomW GenerateConsoleCtrlEvent GetSystemDefaultLCID GetSystemDefaultLangID GetLastError GlobalAlloc GetComputerNameExW FindNextFileW GetPriorityClass ScrollConsoleScreenBufferA OpenJobObjectW InitializeCriticalSection FindResourceExW SetConsoleMode _hwrite GlobalWire GetComputerNameA VerifyVersionInfoA GetStringTypeA FillConsoleOutputCharacterA SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileAttributesExA SetComputerNameW GetFileAttributesW ReadConsoleA GetVolumePathNameA WritePrivateProfileStringW CloseHandle CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetStartupInfoW RaiseException GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc RtlUnwind LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeW GetLocaleInfoA SetFilePointer ReadFile SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidth32A GetFontUnicodeRanges

winhttp

WinHttpReadData

msimg32

AlphaBlend

Sharing