file[.]exe | Triage™

General

Target
file.exe
Size 331KB
Sample220905-sefa7saghp
SHA256 e58a0a2de90f1d7fb8c5c5afc4484680510ff0a70400e1823c81cbd08bca0bae
MD5 439a179223845817c1027ead50abe7bf
SHA1 624346b1e1fec4deafa23497af80d9a36e528f86
SHA512 12704e97f285cc0463a133e0ec0bb07a5083a96170c922674789f842478f5b8f4e110fce6c81935e14eaf122c2e544ba9956e0426c1c1adada468425e35c5ef5
SSDEEP 3072:5KXD9Mj0371MLzr76dFGiMcjfap2E07BNRSlOJgopOEc11TxpJgc:Ef71MLn76/uE37DcOxJ41Tlv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 331KB

file.exe

IMPHASH aa0f88ea0ceba7ff49092ed8c4094320
SHA256 e58a0a2de90f1d7fb8c5c5afc4484680510ff0a70400e1823c81cbd08bca0bae
MD5 439a179223845817c1027ead50abe7bf
SHA1 624346b1e1fec4deafa23497af80d9a36e528f86
SHA512 12704e97f285cc0463a133e0ec0bb07a5083a96170c922674789f842478f5b8f4e110fce6c81935e14eaf122c2e544ba9956e0426c1c1adada468425e35c5ef5
SSDEEP 3072:5KXD9Mj0371MLzr76dFGiMcjfap2E07BNRSlOJgopOEc11TxpJgc:Ef71MLn76/uE37DcOxJ41Tlv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23089

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringW OpenWaitableTimerA WaitNamedPipeA CommConfigDialogW GetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetCPInfoExA EnumResourceTypesA GetModuleFileNameW WriteConsoleOutputCharacterA GetConsoleAliasesLengthA DeleteFileW FillConsoleOutputCharacterW GetProcAddress VirtualAlloc LoadLibraryW ReleaseActCtx GetConsoleAliasA FindFirstChangeNotificationW GetModuleHandleA EnumResourceNamesW UnlockFileEx lstrcpynA AddAtomW GenerateConsoleCtrlEvent GetSystemDefaultLCID GetSystemDefaultLangID GetLastError GlobalAlloc GetComputerNameW FindNextFileW GetPriorityClass ScrollConsoleScreenBufferA OpenJobObjectW InitializeCriticalSection FindResourceExW SetConsoleMode _hwrite GlobalWire GetComputerNameA VerifyVersionInfoA GetStringTypeA FillConsoleOutputCharacterA SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileAttributesExA SetComputerNameW GetFileAttributesW ReadConsoleA GetVolumePathNameA WritePrivateProfileStringW CloseHandle CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RaiseException GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc RtlUnwind SetFilePointer ReadFile LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidth32A GetFontUnicodeRanges

winhttp

WinHttpReadData

msimg32

AlphaBlend

Sharing