file[.]exe | Triage™

General

Target
file.exe
Size 144KB
Sample221001-massvafgh5
SHA256 c3fecb485e07b8cf261887bfae0dc0efc0cc59bd3ccb95192be5d33c0794bea5
MD5 09054f87139231a40fcdce11a42e0d0a
SHA1 239eb6ddb93abaa11995074dddd91d6a9f9942b6
SHA512 54fc1b6c70c4c3e9c664f61ea45aeab0fceb7d0fa859af12caa9e9d7f740bec7e636f53644c1ac8c4f4be767d947e117802a0f32ba265c322423b3e72fda0ca6
SSDEEP 1536:Pfj4eKJ+m0QeJ592G2r/RfebJ0u7AehQWJKcM46z+4MAqrWFW3DOJlTZfwj2:PvKoRer/RI0KhQWJG+PrDDiZfwj2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 144KB

file.exe

IMPHASH 5a0e28b7cee54db9dc60ee4943cce36c
SHA256 c3fecb485e07b8cf261887bfae0dc0efc0cc59bd3ccb95192be5d33c0794bea5
MD5 09054f87139231a40fcdce11a42e0d0a
SHA1 239eb6ddb93abaa11995074dddd91d6a9f9942b6
SHA512 54fc1b6c70c4c3e9c664f61ea45aeab0fceb7d0fa859af12caa9e9d7f740bec7e636f53644c1ac8c4f4be767d947e117802a0f32ba265c322423b3e72fda0ca6
SSDEEP 1536:Pfj4eKJ+m0QeJ592G2r/RfebJ0u7AehQWJKcM46z+4MAqrWFW3DOJlTZfwj2:PvKoRer/RI0KhQWJG+PrDDiZfwj2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13671

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedPushEntrySList OpenFileMappingA GetProfileIntW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize GetPrivateProfileStructA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageW GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW SearchPathW FindResourceW GetSystemTimeAdjustment GetOverlappedResult GetPrivateProfileStructW DeleteFiber EnumDateFormatsW InterlockedCompareExchange FindActCtxSectionStringA GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost SetMailslotInfo SetFilePointer GetConsoleMode DeleteFileA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection GetACP GetOEMCP IsValidCodePage RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing