file[.]exe | Triage™

General

Target
file.exe
Size 233KB
Sample221003-198j8saagp
SHA256 2eb4c8c28f475daf9a2591b7df20662c4d31ddbae472cf0f6e2d48ed7a201152
MD5 d43949d338028745ab598cd3c4a466a5
SHA1 640628b6b42db5d7309d32fff54dd7c2f0c51724
SHA512 ee4a69376e913329bc9ab332a402c92cd103af6652e7e2f46bdb3ee265ac5addfb26301a116ad2c5eb2d9e646ecb39c5ed3c4062b06b3baf282fba176605bd03
SSDEEP 3072:DQ+bdYZZI2eVW6YWQTs2kxzL7z0ZpEMwQNG7JRCBOKAJK9LdO:DQLzCAkxEpor7e/Bd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 233KB

file.exe

IMPHASH 8a103c051668b5ad91ffbf047f700652
SHA256 2eb4c8c28f475daf9a2591b7df20662c4d31ddbae472cf0f6e2d48ed7a201152
MD5 d43949d338028745ab598cd3c4a466a5
SHA1 640628b6b42db5d7309d32fff54dd7c2f0c51724
SHA512 ee4a69376e913329bc9ab332a402c92cd103af6652e7e2f46bdb3ee265ac5addfb26301a116ad2c5eb2d9e646ecb39c5ed3c4062b06b3baf282fba176605bd03
SSDEEP 3072:DQ+bdYZZI2eVW6YWQTs2kxzL7z0ZpEMwQNG7JRCBOKAJK9LdO:DQLzCAkxEpor7e/Bd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19351

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA InterlockedPushEntrySList GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameA LocalFree InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceW GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA DeleteVolumeMountPointA GetCPInfo GetQueuedCompletionStatus MoveFileWithProgressA CopyFileA lstrcpynW WriteConsoleW GetBinaryTypeW WriteConsoleOutputA GetCommandLineA InterlockedIncrement CreateActCtxW FormatMessageA GetModuleHandleA EnterCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InterlockedExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd EnumDateFormatsA GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo HeapWalk SetFilePointer SetConsoleMode RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoA HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA LCMapStringW

user32

CharUpperBuffW

winhttp

WinHttpCreateUrl

Sharing