file[.]exe | Triage™

General

Target
file.exe
Size 284KB
Sample220929-w4azkacfbp
SHA256 deabbce15465142febcf0ae98d11c28d1e919911d9e3e91e3e1b57bfa67e3de5
MD5 b76978e613ccd629f5c1c0e4b093f05d
SHA1 d4344734006176dd871dd7b68be17fd92e8596b6
SHA512 7625f7986db005d3da1bea3007817ae373391f2ad934fa832850de9cf8e51873cfbb9b1250016651b0be8d01bb9480bd56c64bd2e4b4f5f5e0714d8be9664565
SSDEEP 6144:x8P+Bi6CRhtjZIopuzbgwuO09YJv+wVfgyL:xRi632unnw9Yxyy
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 284KB

file.exe

IMPHASH 6652d55b880c70f9997edd5559be57b3
SHA256 deabbce15465142febcf0ae98d11c28d1e919911d9e3e91e3e1b57bfa67e3de5
MD5 b76978e613ccd629f5c1c0e4b093f05d
SHA1 d4344734006176dd871dd7b68be17fd92e8596b6
SHA512 7625f7986db005d3da1bea3007817ae373391f2ad934fa832850de9cf8e51873cfbb9b1250016651b0be8d01bb9480bd56c64bd2e4b4f5f5e0714d8be9664565
SSDEEP 6144:x8P+Bi6CRhtjZIopuzbgwuO09YJv+wVfgyL:xRi632unnw9Yxyy
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30398

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA FoldStringA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA SetSystemTimeAdjustment FindNextFileW EnumResourceTypesW GetModuleFileNameA IsBadHugeWritePtr LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW GetShortPathNameW GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA GetProcAddress GetUserDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameA FindNextFileA OpenWaitableTimerA ResetEvent GlobalUnfix GetComputerNameA GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameW SetCalendarInfoW SetComputerNameW GetFileAttributesA GetVolumePathNameA CloseHandle CreateFileA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

ole32

OleQueryCreateFromData

winhttp

WinHttpCloseHandle

Sharing