file[.]exe | Triage™

General

Target
file.exe
Size 372KB
Sample220929-t64csabdf6
SHA256 c7a2d5f912e97de4b89dca13c96b70a8f14f9706865d4a44a1fc4c85e915458e
MD5 f757148c288bc5e9ece4017d1831ff4c
SHA1 87d326be0c8513ec62cc55af0778a9b60ffecd31
SHA512 67be885e695648f05bdec004d0336f7d1e0cf4259f5b30a880f00bf514d408996fc93b5c004b18e597aca5c7c9572e91a54bb6abc5e52570ba62990d6957b51e
SSDEEP 6144:bWU1QL9JtHArDN3bWuG7uQyv+f2fWuzbgwuO08wVfg3L:bqL98rDN3qvuLE/unnwA3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 372KB

file.exe

IMPHASH 6652d55b880c70f9997edd5559be57b3
SHA256 c7a2d5f912e97de4b89dca13c96b70a8f14f9706865d4a44a1fc4c85e915458e
MD5 f757148c288bc5e9ece4017d1831ff4c
SHA1 87d326be0c8513ec62cc55af0778a9b60ffecd31
SHA512 67be885e695648f05bdec004d0336f7d1e0cf4259f5b30a880f00bf514d408996fc93b5c004b18e597aca5c7c9572e91a54bb6abc5e52570ba62990d6957b51e
SSDEEP 6144:bWU1QL9JtHArDN3bWuG7uQyv+f2fWuzbgwuO08wVfg3L:bqL98rDN3qvuLE/unnwA3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30398

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA FoldStringA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA SetSystemTimeAdjustment FindNextFileW EnumResourceTypesW GetModuleFileNameA IsBadHugeWritePtr LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW GetShortPathNameW GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA GetProcAddress GetUserDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameA FindNextFileA OpenWaitableTimerA ResetEvent GlobalUnfix GetComputerNameA GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameW SetCalendarInfoW SetComputerNameW GetFileAttributesA GetVolumePathNameA CloseHandle CreateFileA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

ole32

OleQueryCreateFromData

winhttp

WinHttpCloseHandle

Sharing