file[.]exe | Triage™

General

Target
file.exe
Size 147KB
Sample221001-trclhsgcd8
SHA256 c2c563df059b1b4cb5e81bcee436fe2236efecbc428152353e649488972f75c4
MD5 3c38d714da1f80ad762c61fdb34f84ef
SHA1 921f756e58439c2fa06f9ddd3fbbc1df6e5bcb0f
SHA512 205d004a6f8dc9ddddf0d4aaaa5402533d10516883a71da1bbce6e40c4fca1a5b023bbf8a27b23a68718f437733e7774e986d7d3c71a8baad683312cb5a59a93
SSDEEP 3072:13bnKilNPR/Ybvlj5aHfMyId4MnEsai9kDgv9rHbw:Milbav15ENICYxHU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 147KB

file.exe

IMPHASH 8a3e648547b460ce931101c457bc9165
SHA256 c2c563df059b1b4cb5e81bcee436fe2236efecbc428152353e649488972f75c4
MD5 3c38d714da1f80ad762c61fdb34f84ef
SHA1 921f756e58439c2fa06f9ddd3fbbc1df6e5bcb0f
SHA512 205d004a6f8dc9ddddf0d4aaaa5402533d10516883a71da1bbce6e40c4fca1a5b023bbf8a27b23a68718f437733e7774e986d7d3c71a8baad683312cb5a59a93
SSDEEP 3072:13bnKilNPR/Ybvlj5aHfMyId4MnEsai9kDgv9rHbw:Milbav15ENICYxHU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13607

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedPushEntrySList OpenFileMappingA GetProfileIntW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetPrivateProfileStructA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageA GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection EnumSystemLocalesA GetStringTypeExA OpenMutexW SearchPathW FindResourceA GetSystemTimeAdjustment LoadModule GetPrivateProfileStructW DeleteFiber EnumDateFormatsW InterlockedCompareExchange FindActCtxSectionStringA GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError SetMailslotInfo HeapWalk SetFilePointer GetConsoleMode DeleteFileA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection GetACP GetOEMCP IsValidCodePage RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing