file[.]exe | Triage™

General

Target
file.exe
Size 284KB
Sample220929-rey8mscagq
SHA256 a2de61e35702764a93d4f976b01facb0b636fe6a50586e5e032d8e3cd5899453
MD5 cff73dfe9d278692ce8b7bf4dcd144a6
SHA1 94cbb5020353e2a27e3ab9d7cbda3ae81b78571b
SHA512 ce4fe5d1ccd02b56d40561897491e9a7030f190e8ea250a523c5944fbe61c3652b94bc594cf9517553804dce6489dc1e090ac060cb9814bf7ef690d514cec40f
SSDEEP 6144:9H91onvF2VHqpxLuzbgwuO0WOb+wVfg9:9d1dOunnwA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 284KB

file.exe

IMPHASH d01827212726e3502549e8968b7084a8
SHA256 a2de61e35702764a93d4f976b01facb0b636fe6a50586e5e032d8e3cd5899453
MD5 cff73dfe9d278692ce8b7bf4dcd144a6
SHA1 94cbb5020353e2a27e3ab9d7cbda3ae81b78571b
SHA512 ce4fe5d1ccd02b56d40561897491e9a7030f190e8ea250a523c5944fbe61c3652b94bc594cf9517553804dce6489dc1e090ac060cb9814bf7ef690d514cec40f
SSDEEP 6144:9H91onvF2VHqpxLuzbgwuO0WOb+wVfg9:9d1dOunnwA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30382

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA FoldStringA InterlockedCompareExchange OpenWaitableTimerA CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA SetSystemTimeAdjustment FindNextFileW EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW GetShortPathNameW GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA GetProcAddress GetUserDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW ResetEvent GlobalWire GetComputerNameA GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameW SetCalendarInfoW SetComputerNameW GetFileAttributesA GetVolumePathNameA CloseHandle CreateFileA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

ole32

OleQueryCreateFromData

winhttp

WinHttpCloseHandle

Sharing