file[.]exe | Triage™

General

Target
file.exe
Size 133KB
Sample221002-tx3pwseeb9
SHA256 af9f37df3f2bb32fdfad2297073c12a92e89f5e75eca8ba0320a97daf77372d3
MD5 4e7b1b66b0c5f9f14e0804b2a539d7bc
SHA1 be5a7a66f17050802ac3c40706ad76b98ea710a0
SHA512 6c8551a7760b49cd7038cfa377138a5b348e91529174102c9ee381635e132d2aa734c886686d1aff8de3071c1af54a0cbd0c3a8ee94875d5ff0176406779700e
SSDEEP 1536:F0JzCaiJkx7SmRHsbNiU6Uj0UetA4SlX7Rq7x8+0qkky4EP8Ae/futR+g3qbUGB7:F0BCDmRMFnWMqLG8AeO3+g8B3L
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 133KB

file.exe

IMPHASH b6fa9abe9963d9e1a36e28c16446a976
SHA256 af9f37df3f2bb32fdfad2297073c12a92e89f5e75eca8ba0320a97daf77372d3
MD5 4e7b1b66b0c5f9f14e0804b2a539d7bc
SHA1 be5a7a66f17050802ac3c40706ad76b98ea710a0
SHA512 6c8551a7760b49cd7038cfa377138a5b348e91529174102c9ee381635e132d2aa734c886686d1aff8de3071c1af54a0cbd0c3a8ee94875d5ff0176406779700e
SSDEEP 1536:F0JzCaiJkx7SmRHsbNiU6Uj0UetA4SlX7Rq7x8+0qkky4EP8Ae/futR+g3qbUGB7:F0BCDmRMFnWMqLG8AeO3+g8B3L
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14007

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA InterlockedPushEntrySList GetConsoleAliasesW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceA GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA CopyFileA lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageA GetConsoleAliasA GetModuleHandleA LeaveCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedCompareExchange GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError SetMailslotInfo HeapWalk SetFilePointer GetConsoleMode Sleep ExitProcess MoveFileA DeleteFileA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

CharUpperBuffW

winhttp

WinHttpQueryOption

Sharing