file[.]exe | Triage™

General

Target
file.exe
Size 284KB
Sample220929-rdtxjabba2
SHA256 8687e077f773bced2e6d2a465208ac1cb3e1ed34726a31dd74bd89d4a233c9d1
MD5 aad9935c3a03396febe6cf03990ac293
SHA1 b255a02890075d46c084fa0e1e12b157e125ccfb
SHA512 ace0069d1a98521eeb037d7e495fbd9a3a81aa93a8c3fd99a08d8dc1e65da0594874a92e92f25f7b88be6ea9342e0dc3565e3e51119c90775f7caceca8918a96
SSDEEP 6144:o+XWyBnAia3hCkDtukuzbgwuO0aFVMncwVfg9:oqWSBaRCkxZunnwaFqng
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 284KB

file.exe

IMPHASH d01827212726e3502549e8968b7084a8
SHA256 8687e077f773bced2e6d2a465208ac1cb3e1ed34726a31dd74bd89d4a233c9d1
MD5 aad9935c3a03396febe6cf03990ac293
SHA1 b255a02890075d46c084fa0e1e12b157e125ccfb
SHA512 ace0069d1a98521eeb037d7e495fbd9a3a81aa93a8c3fd99a08d8dc1e65da0594874a92e92f25f7b88be6ea9342e0dc3565e3e51119c90775f7caceca8918a96
SSDEEP 6144:o+XWyBnAia3hCkDtukuzbgwuO0aFVMncwVfg9:oqWSBaRCkxZunnwaFqng
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30382

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA FoldStringA InterlockedCompareExchange OpenWaitableTimerA CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA SetSystemTimeAdjustment FindNextFileW EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW GetShortPathNameW GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA GetProcAddress GetUserDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW ResetEvent GlobalWire GetComputerNameA GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameW SetCalendarInfoW SetComputerNameW GetFileAttributesA GetVolumePathNameA CloseHandle CreateFileA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

ole32

OleQueryCreateFromData

winhttp

WinHttpCloseHandle

Sharing