file[.]exe | Triage™

General

Target
file.exe
Size 132KB
Sample221002-lycabsabd6
SHA256 37557d26ed1b559cb29eac46e2f6c7f1fee9da66bf480865daafdb49fd8bd73e
MD5 fe9fbe3dee72fb4d878b4d0d15abad86
SHA1 7da8d6d310384ac4cd5e3e75acf46a88de590905
SHA512 bce79236e16fef930434cd8be3fdc198ada1ed6189daff5b23b9024a10697d355ae8fcee3f452628c242dfb3c6e2a83d75ae19431a6f2f6bd0cf83c63de5d4b5
SSDEEP 3072:Ib1pIC0VjRmFIMa1g2ecwXOPwOL+Z/f4Hh6CnROJM3Vz8:OUMQecwDOLThl5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 132KB

file.exe

IMPHASH 2f67f15a4f61eeb93dba899647c1ad53
SHA256 37557d26ed1b559cb29eac46e2f6c7f1fee9da66bf480865daafdb49fd8bd73e
MD5 fe9fbe3dee72fb4d878b4d0d15abad86
SHA1 7da8d6d310384ac4cd5e3e75acf46a88de590905
SHA512 bce79236e16fef930434cd8be3fdc198ada1ed6189daff5b23b9024a10697d355ae8fcee3f452628c242dfb3c6e2a83d75ae19431a6f2f6bd0cf83c63de5d4b5
SSDEEP 3072:Ib1pIC0VjRmFIMa1g2ecwXOPwOL+Z/f4Hh6CnROJM3Vz8:OUMQecwDOLThl5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13367

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedPushEntrySList GetConsoleAliasesW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceA GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA CopyFileA lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageA GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedCompareExchange GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError SetMailslotInfo HeapWalk SetFilePointer GetConsoleMode MoveFileA DeleteFileA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection GetACP GetOEMCP IsValidCodePage RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing