file[.]exe | Triage™

General

Target
file.exe
Size 146KB
Sample221002-h1hcksdcf4
SHA256 751b986e00e72d819593b4ee9046cecd975fb59b1a03daccb96db0b5979ef1a2
MD5 69604670e3c1e05581ca4df78696ca7e
SHA1 0aa50ad9d44c95fef65d99cadcddbd7436401b03
SHA512 116032bcf5d0fcc3afc82a3b4528b24108d9a90092bfc28dad31327f04aaa8296dadae8bfda2ba09dfecd347df03949123dbb6567cebfcdbbe380e5d4702de95
SSDEEP 3072:o+vnHV8sNvRIo/pJgCpFDBZm/qfuMkjuNm41gI5Tp0Io:zHV8shbgCppXmlMk63mKuI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 146KB

file.exe

IMPHASH 6aa90784f4bfdc09f62ca4aa7f9efd73
SHA256 751b986e00e72d819593b4ee9046cecd975fb59b1a03daccb96db0b5979ef1a2
MD5 69604670e3c1e05581ca4df78696ca7e
SHA1 0aa50ad9d44c95fef65d99cadcddbd7436401b03
SHA512 116032bcf5d0fcc3afc82a3b4528b24108d9a90092bfc28dad31327f04aaa8296dadae8bfda2ba09dfecd347df03949123dbb6567cebfcdbbe380e5d4702de95
SSDEEP 3072:o+vnHV8sNvRIo/pJgCpFDBZm/qfuMkjuNm41gI5Tp0Io:zHV8shbgCppXmlMk63mKuI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13783

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedPushEntrySList OpenFileMappingA GetProfileIntW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA CopyFileA lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageA GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection EnumSystemLocalesA GetStringTypeExA OpenMutexW SearchPathW FindResourceA RtlCaptureContext LoadModule GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedCompareExchange GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError SetMailslotInfo HeapWalk SetFilePointer GetConsoleMode DeleteFileA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection GetACP GetOEMCP IsValidCodePage RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing