file[.]exe | Triage™

General

Target
file.exe
Size 232KB
Sample221001-h4cw9sffa2
SHA256 e873f4e1b6020ffd62cd64bb01383d97102f1f18c828bacfddcb97346f5b1ebf
MD5 cde95e576fed0dd385b161d8cffa6c31
SHA1 b10ef6f96393d7b04a666e7c98c6aa98ac4b1a2e
SHA512 57b37136c6292876e3e8747d228b015341d963c94ccc101fc21744f80b5b5a19d52ec97e74721eef017de9d20519ca4c5425870c0da83b2af35748c2eecf583c
SSDEEP 3072:SBbkZFsreRWOoVyITQy3jiRq2nzfWno1uEVokzlbWO8mExwicKu7cCdNDm9:Ok3s4JRxzfWo1uErzoODESic+CXq9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 232KB

file.exe

IMPHASH 70b0c311721ddf530be3153865d46632
SHA256 e873f4e1b6020ffd62cd64bb01383d97102f1f18c828bacfddcb97346f5b1ebf
MD5 cde95e576fed0dd385b161d8cffa6c31
SHA1 b10ef6f96393d7b04a666e7c98c6aa98ac4b1a2e
SHA512 57b37136c6292876e3e8747d228b015341d963c94ccc101fc21744f80b5b5a19d52ec97e74721eef017de9d20519ca4c5425870c0da83b2af35748c2eecf583c
SSDEEP 3072:SBbkZFsreRWOoVyITQy3jiRq2nzfWno1uEVokzlbWO8mExwicKu7cCdNDm9:Ok3s4JRxzfWo1uErzoODESic+CXq9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13527

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedPushEntrySList OpenFileMappingA GetProfileIntW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize GetPrivateProfileStructA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageW GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW SearchPathA FindResourceW GetSystemTimeAdjustment GetOverlappedResult GetPrivateProfileStructW DeleteFiber EnumDateFormatsW InterlockedCompareExchange FindActCtxSectionStringA GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost SetMailslotInfo SetFilePointer GetConsoleMode DeleteFileA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection GetACP GetOEMCP IsValidCodePage RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing