file[.]exe | Triage™

General

Target
file.exe
Size 233KB
Sample220930-2bx7aafae2
SHA256 9a3c9827573edff70dce49dcb4fde06f2ab773145daa93084a0cd6bab48f4a09
MD5 0fb4ace219f06c9d049a5da9298fd5e8
SHA1 9073327030a763c29d964aeb358dc848b2781718
SHA512 89dcf0fdc74cdd3fe655385903edb8c7b73720b50e56276d252eeba20b1bb5e3489bb01a8b70dd06d49f3f7bae27a8f5585dec6181123ab8a2b5d7d7639d69fe
SSDEEP 3072:hpSQUSlAhDPRAAFAgEie6RPdEXoMR+34/A5Y8ypeheBP5XhXDTQYzFw+TlIkB:RAhZF4ibPmR5Y5dYhhXfQYSo7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 233KB

file.exe

IMPHASH 473b03041c4e4afe59409cd9fd4d6e22
SHA256 9a3c9827573edff70dce49dcb4fde06f2ab773145daa93084a0cd6bab48f4a09
MD5 0fb4ace219f06c9d049a5da9298fd5e8
SHA1 9073327030a763c29d964aeb358dc848b2781718
SHA512 89dcf0fdc74cdd3fe655385903edb8c7b73720b50e56276d252eeba20b1bb5e3489bb01a8b70dd06d49f3f7bae27a8f5585dec6181123ab8a2b5d7d7639d69fe
SSDEEP 3072:hpSQUSlAhDPRAAFAgEie6RPdEXoMR+34/A5Y8ypeheBP5XhXDTQYzFw+TlIkB:RAhZF4ibPmR5Y5dYhhXfQYSo7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14279

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedPushEntrySList OpenFileMappingA GetProfileIntW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize GetPrivateProfileStructA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageW GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW SearchPathA FindResourceW GetSystemTimeAdjustment GetOverlappedResult GetPrivateProfileStructW DeleteFiber EnumDateFormatsW InterlockedCompareExchange FindActCtxSectionStringA GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost SetMailslotInfo SetFilePointer GetConsoleMode LCMapStringW Sleep ExitProcess DeleteFileA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing