file[.]exe | Triage™

General

Target
file.exe
Size 141KB
Sample220930-z8fx6aehd3
SHA256 97b09005a5543ff314154d7097249b99eff47072fa84f4da79689c5b4207f869
MD5 2d57da0453d13c871529c29d65da900f
SHA1 47e1d1ad0f8c223791d3b43bd22d6117975771cf
SHA512 22dfb54a97d18a387243713854b7a5ccb70f3297c136f1f093db6ea544de86631f2ebe336cf478225a42caddf545dd5eca808587cb3f38a0e4513390ad9cce8a
SSDEEP 3072:irRE+XUh5nmBqdRnvcBUKJTq3kJRWVWh4PChT4D+d8N:i+vmB/UKJTck/WYh4PKcKS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 141KB

file.exe

IMPHASH 986461bd3bdad5d0ca4cda2de0fb0cac
SHA256 97b09005a5543ff314154d7097249b99eff47072fa84f4da79689c5b4207f869
MD5 2d57da0453d13c871529c29d65da900f
SHA1 47e1d1ad0f8c223791d3b43bd22d6117975771cf
SHA512 22dfb54a97d18a387243713854b7a5ccb70f3297c136f1f093db6ea544de86631f2ebe336cf478225a42caddf545dd5eca808587cb3f38a0e4513390ad9cce8a
SSDEEP 3072:irRE+XUh5nmBqdRnvcBUKJTq3kJRWVWh4PChT4D+d8N:i+vmB/UKJTck/WYh4PKcKS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14343

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer OpenFileMappingA GetProfileIntA ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedExchange SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize GetPrivateProfileStructA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomW TerminateJobObject lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageW GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW SearchPathA FindResourceW GetSystemTimeAdjustment InterlockedCompareExchange GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsW InterlockedDecrement FindActCtxSectionStringA GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost SetMailslotInfo GetConsoleMode LCMapStringW Sleep ExitProcess DeleteFileA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing