file[.]exe | Triage™

General

Target
file.exe
Size 132KB
Sample221002-jcykbsdhc3
SHA256 bea13ec7eeade3640e8b845e6e03cecfc405e51b070f064087fddcb9b4922bc1
MD5 981c7fc595383fa8222f54b49766f30c
SHA1 41d1b14f86a496c9ca277e505c6f466b1f24f96f
SHA512 d3d7d8b710f26ac939836459a6b397f7c0b19f0999b439f99a6344cdea91120e02b9545167a1b0ce0d101f89f67e623373529b857a87243fed394892a3289cc0
SSDEEP 3072:owhptjcxRdDn36ExxX8dG3pbiA/H0Oyd0ETVh54CPb7tu:7YXxMdGdRv0qETVhW47
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 132KB

file.exe

IMPHASH 6d7e759d4c3973981b03bf4dbad69e76
SHA256 bea13ec7eeade3640e8b845e6e03cecfc405e51b070f064087fddcb9b4922bc1
MD5 981c7fc595383fa8222f54b49766f30c
SHA1 41d1b14f86a496c9ca277e505c6f466b1f24f96f
SHA512 d3d7d8b710f26ac939836459a6b397f7c0b19f0999b439f99a6344cdea91120e02b9545167a1b0ce0d101f89f67e623373529b857a87243fed394892a3289cc0
SSDEEP 3072:owhptjcxRdDn36ExxX8dG3pbiA/H0Oyd0ETVh54CPb7tu:7YXxMdGdRv0qETVhW47
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13335

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedPushEntrySList OpenFileMappingA GetConsoleAliasesW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceA GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA CopyFileA lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageA GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedCompareExchange GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError SetMailslotInfo HeapWalk SetFilePointer GetConsoleMode DeleteFileA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection GetACP GetOEMCP IsValidCodePage RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing