file[.]exe | Triage™

General

Target
file.exe
Size 234KB
Sample221001-yzd7jadgg2
SHA256 999022fa6acd7e8924a131f60172fb53812ecee298252abbf7cd9a7fa375f129
MD5 6f3d4e9d973923bfe1e45d8a79fd5f37
SHA1 ae0fe4046e9d5ca76fe332677e1e9143cbe3f26c
SHA512 15d6c16b6230201d9882ef1e3efa9a83f81c30058651adbabdb87ffa8bdb59ee7ab6100e75133cf522c6becb1e9c3f36caeeb32be1e931cf9dac7c6105b15b9d
SSDEEP 3072:JDTrUSGRCi1/a3ICy9HRopYP3PY8VmRHZvbGy4RI6BqOPWIQtmC/g:dUp1/a3ICy9HXPPk5TGFIdOOItC/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 234KB

file.exe

IMPHASH 1e9ce09d601dc977ecbcf04946037513
SHA256 999022fa6acd7e8924a131f60172fb53812ecee298252abbf7cd9a7fa375f129
MD5 6f3d4e9d973923bfe1e45d8a79fd5f37
SHA1 ae0fe4046e9d5ca76fe332677e1e9143cbe3f26c
SHA512 15d6c16b6230201d9882ef1e3efa9a83f81c30058651adbabdb87ffa8bdb59ee7ab6100e75133cf522c6becb1e9c3f36caeeb32be1e931cf9dac7c6105b15b9d
SSDEEP 3072:JDTrUSGRCi1/a3ICy9HRopYP3PY8VmRHZvbGy4RI6BqOPWIQtmC/g:dUp1/a3ICy9HXPPk5TGFIdOOItC/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13559

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedPushEntrySList OpenFileMappingA GetProfileIntW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetPrivateProfileStructA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageA GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection EnumSystemLocalesA GetStringTypeExA OpenMutexW SearchPathW FindResourceA GetSystemTimeAdjustment LoadModule GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedCompareExchange GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError SetMailslotInfo HeapWalk SetFilePointer GetConsoleMode DeleteFileA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection GetACP GetOEMCP IsValidCodePage RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing