file[.]exe | Triage™

General

Target
file.exe
Size 133KB
Sample221002-rszrbscbdm
SHA256 d0ed763ee108686d8b358f89a65c45ee932755a3b2ceabb55282e2618e90aba2
MD5 e874a1fe90698daeb8d0faa9d3b92027
SHA1 aa6ce148e834043cf6d2bed8e4e1bfc7e7e8a01c
SHA512 fabbd04a0b85831fa5ed7ff00a30cec4c7b6735e166a8fdc6f81ed3299ee5bfcf51b0efe9e517b296e45ee119c7b7c241a0a9f962631f9a19a4bfdf5e8fdece5
SSDEEP 3072:IHzVnRR7Zh7zeOe8uH/096mxoJQEXnLBS:u7DzeKuH89XQB3LB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 133KB

file.exe

IMPHASH fdb040766d241b18637c17cd8a88d322
SHA256 d0ed763ee108686d8b358f89a65c45ee932755a3b2ceabb55282e2618e90aba2
MD5 e874a1fe90698daeb8d0faa9d3b92027
SHA1 aa6ce148e834043cf6d2bed8e4e1bfc7e7e8a01c
SHA512 fabbd04a0b85831fa5ed7ff00a30cec4c7b6735e166a8fdc6f81ed3299ee5bfcf51b0efe9e517b296e45ee119c7b7c241a0a9f962631f9a19a4bfdf5e8fdece5
SSDEEP 3072:IHzVnRR7Zh7zeOe8uH/096mxoJQEXnLBS:u7DzeKuH89XQB3LB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13255

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA InterlockedPushEntrySList GetConsoleAliasesW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceA GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA CopyFileA lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageA GetConsoleAliasA GetModuleHandleA LeaveCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedCompareExchange GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError SetMailslotInfo HeapWalk SetFilePointer GetConsoleMode MoveFileA DeleteFileA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection GetACP GetOEMCP IsValidCodePage RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

user32

CharUpperBuffW

winhttp

WinHttpQueryOption

Sharing