file[.]exe | Triage™

General

Target
file.exe
Size 371KB
Sample220929-te2pwaccep
SHA256 8e20aa3f6c6659be8b5bb84028d4481f57df81488aaa4a56f333ffee3e13bef3
MD5 d0053c55d6cd2aa8c70aae3bd5f95032
SHA1 b411c19fd2242e49ef16c48598cb7a6887932ad6
SHA512 1ad7a431e70633e985feb5d30c99265bc6eb3d736ffe886330ceb6c50feb7dbe2d18d2b2cb43f5db816b4ec44266707b7575bafc2680e8f041df05456ff0e4c7
SSDEEP 6144:Wnz7Hxcm9IKtPwvqv91DF1CinzFJuzbgwuO0Ma8wVfg3L:WvHxc1KtP/vx1CinzunnwM/3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 371KB

file.exe

IMPHASH 6652d55b880c70f9997edd5559be57b3
SHA256 8e20aa3f6c6659be8b5bb84028d4481f57df81488aaa4a56f333ffee3e13bef3
MD5 d0053c55d6cd2aa8c70aae3bd5f95032
SHA1 b411c19fd2242e49ef16c48598cb7a6887932ad6
SHA512 1ad7a431e70633e985feb5d30c99265bc6eb3d736ffe886330ceb6c50feb7dbe2d18d2b2cb43f5db816b4ec44266707b7575bafc2680e8f041df05456ff0e4c7
SSDEEP 6144:Wnz7Hxcm9IKtPwvqv91DF1CinzFJuzbgwuO0Ma8wVfg3L:WvHxc1KtP/vx1CinzunnwM/3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30398

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA FoldStringA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA SetSystemTimeAdjustment FindNextFileW EnumResourceTypesW GetModuleFileNameA IsBadHugeWritePtr LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW GetShortPathNameW GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA GetProcAddress GetUserDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameA FindNextFileA OpenWaitableTimerA ResetEvent GlobalUnfix GetComputerNameA GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameW SetCalendarInfoW SetComputerNameW GetFileAttributesA GetVolumePathNameA CloseHandle CreateFileA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

ole32

OleQueryCreateFromData

winhttp

WinHttpCloseHandle

Sharing