file[.]exe | Triage™

General

Target
file.exe
Size 291KB
Sample220929-mc4ccsadg6
SHA256 3fe5bc3d2a9845a8893c8f5e82edb9b135d1ecb1b2759a1fd1d22673d7953b8c
MD5 3df34a18ed44346b541553c08623efbe
SHA1 68c0a783669b99f3c20838d8644ee774a93129b5
SHA512 9183d5dbfcc37d0127d450d96b79450e1053b5550e2f7df89d72152fe3a5109865cb553792ca82e2d21f98bb818ada2b1cdb6e4ab05c5d9c5d4d01689098c907
SSDEEP 3072:pXhG+IfyYLJQXr8X357Bcw51q2VQkxCA/UUjdONfGyXNb0K4M/h3JpZa9uD6Vdyk:NcRLQXr8Z4sxRUUj4NOQB0RwwVfgM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 291KB

file.exe

IMPHASH a07b1168025450aad3f23c1b945db1fb
SHA256 3fe5bc3d2a9845a8893c8f5e82edb9b135d1ecb1b2759a1fd1d22673d7953b8c
MD5 3df34a18ed44346b541553c08623efbe
SHA1 68c0a783669b99f3c20838d8644ee774a93129b5
SHA512 9183d5dbfcc37d0127d450d96b79450e1053b5550e2f7df89d72152fe3a5109865cb553792ca82e2d21f98bb818ada2b1cdb6e4ab05c5d9c5d4d01689098c907
SSDEEP 3072:pXhG+IfyYLJQXr8X357Bcw51q2VQkxCA/UUjdONfGyXNb0K4M/h3JpZa9uD6Vdyk:NcRLQXr8Z4sxRUUj4NOQB0RwwVfgM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31017

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA FoldStringA InterlockedCompareExchange OpenWaitableTimerA CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA SetSystemTimeAdjustment FindNextFileW EnumResourceTypesA GetModuleFileNameA IsBadCodePtr LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW GetShortPathNameW GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA GetProcAddress GetUserDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameW lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW ResetEvent GlobalWire GetComputerNameA GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetCalendarInfoW SetComputerNameA GetFileAttributesA GetVolumePathNameW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

ole32

OleQueryCreateFromData

winhttp

WinHttpCloseHandle

Sharing