file[.]exe | Triage™

General

Target
file.exe
Size 235KB
Sample221002-affz1sechp
SHA256 d14cb62289c31c4564a168c6d8e33688a6fef5d2aa1371f744667284b52c4bd4
MD5 18fb26c94b99d399b83281a4f1f1215b
SHA1 8a65ffc0b657b9bf1818505b6f92375aabde14b6
SHA512 abc95cd54694b71f5e62f42776053385b007311ef674220816fddd3e04c8a573db123e780de101a1dad86b1883a9b9f2e278fff8c2c71394e80a3c772ba9b170
SSDEEP 3072:d+dVTs0vRrA1Yv/x8rIyGup2rXV0gC7EvhT1LOBl9tIknQyBV4W4ziV+2LvD:6TsHe/x8cXX697eK7PvtH74W9v
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 235KB

file.exe

IMPHASH 6aa90784f4bfdc09f62ca4aa7f9efd73
SHA256 d14cb62289c31c4564a168c6d8e33688a6fef5d2aa1371f744667284b52c4bd4
MD5 18fb26c94b99d399b83281a4f1f1215b
SHA1 8a65ffc0b657b9bf1818505b6f92375aabde14b6
SHA512 abc95cd54694b71f5e62f42776053385b007311ef674220816fddd3e04c8a573db123e780de101a1dad86b1883a9b9f2e278fff8c2c71394e80a3c772ba9b170
SSDEEP 3072:d+dVTs0vRrA1Yv/x8rIyGup2rXV0gC7EvhT1LOBl9tIknQyBV4W4ziV+2LvD:6TsHe/x8cXX697eK7PvtH74W9v
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13783

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedPushEntrySList OpenFileMappingA GetProfileIntW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA CopyFileA lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageA GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection EnumSystemLocalesA GetStringTypeExA OpenMutexW SearchPathW FindResourceA RtlCaptureContext LoadModule GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedCompareExchange GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError SetMailslotInfo HeapWalk SetFilePointer GetConsoleMode DeleteFileA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection GetACP GetOEMCP IsValidCodePage RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing