file[.]exe | Triage™

General

Target
file.exe
Size 220KB
Sample221002-j9kdzagfbr
SHA256 37ba29cfabde1cbdfea06e90f92af1c29f1fed73c3e9709831498d03cf993010
MD5 b56cf3052fc80bc29dba52b8296e3deb
SHA1 3c03c0a076f93c6527e7db32c712389b50b57217
SHA512 2db2b677fbd106f5b4af36a669b05dc6b3d10e8cdc900e5b30ade323be55ca08b8b95cb6825255dd50edf35beff9368cb7b7ef751f3e1cd8d59c4126f9a5ce27
SSDEEP 3072:KXdsRxjRzgZrPmEy6+NnryrKCHaL+FPzzV3S1cuCZfebPmcEKKvLW+S+AAf7r:qrZjK/cKC6aFPzzV3nuluKsW+S+Ao7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 220KB

file.exe

IMPHASH e80d0c3a4f2219aea2e16c0ecf8e6ea6
SHA256 37ba29cfabde1cbdfea06e90f92af1c29f1fed73c3e9709831498d03cf993010
MD5 b56cf3052fc80bc29dba52b8296e3deb
SHA1 3c03c0a076f93c6527e7db32c712389b50b57217
SHA512 2db2b677fbd106f5b4af36a669b05dc6b3d10e8cdc900e5b30ade323be55ca08b8b95cb6825255dd50edf35beff9368cb7b7ef751f3e1cd8d59c4126f9a5ce27
SSDEEP 3072:KXdsRxjRzgZrPmEy6+NnryrKCHaL+FPzzV3S1cuCZfebPmcEKKvLW+S+AAf7r:qrZjK/cKC6aFPzzV3nuluKsW+S+Ao7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13383

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedPushEntrySList OpenFileMappingA GetConsoleAliasesW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceA GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA CopyFileA lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageA GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedCompareExchange GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError SetMailslotInfo HeapWalk SetFilePointer GetConsoleMode MoveFileA DeleteFileA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection GetACP GetOEMCP IsValidCodePage RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing