file[.]exe | Triage™

General

Target
file.exe
Size 233KB
Sample221003-m8jmtsdbe7
SHA256 cf1d954d28450dfbecce6d8d93d73a8526407261df872867ecc373da1129105b
MD5 8589d0babc5495274097a0b40ad5e8a9
SHA1 d9f4c9f032b73d8203cd0012b5422b9672875ef6
SHA512 a487a671b4a0c3ca478da415be45c4d1c20126030f45146917faebc9a253c6ca9e937bb32fdd51badbf009c121eb6988fdcce78a884f37c5879d769b973a965e
SSDEEP 3072:yKijhaRZCSHDKPx3O9ROHJjnFyeiJclo7iMO+k7n7+G4RrFxWcUWtdsWBRtFfJUj:yKLHDKPhOqpjFyeiJVVk773hWFftFF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 233KB

file.exe

IMPHASH bd837f4e3a290baf0a388800378abc3f
SHA256 cf1d954d28450dfbecce6d8d93d73a8526407261df872867ecc373da1129105b
MD5 8589d0babc5495274097a0b40ad5e8a9
SHA1 d9f4c9f032b73d8203cd0012b5422b9672875ef6
SHA512 a487a671b4a0c3ca478da415be45c4d1c20126030f45146917faebc9a253c6ca9e937bb32fdd51badbf009c121eb6988fdcce78a884f37c5879d769b973a965e
SSDEEP 3072:yKijhaRZCSHDKPx3O9ROHJjnFyeiJclo7iMO+k7n7+G4RrFxWcUWtdsWBRtFfJUj:yKLHDKPhOqpjFyeiJVVk773hWFftFF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19447

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA InterlockedPushEntrySList GetConsoleAliasesW ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameA LocalFree InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameW IsBadWritePtr FindResourceA GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA DeleteVolumeMountPointA GetCPInfo PostQueuedCompletionStatus MoveFileWithProgressA CopyFileA lstrcpynW WriteConsoleW GetBinaryTypeA WriteConsoleOutputW GetCommandLineA InterlockedIncrement CreateActCtxW FormatMessageA GetModuleHandleA LeaveCriticalSection GetStringTypeExA OpenMutexW FindResourceW RtlCaptureContext InterlockedExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd EnumDateFormatsA GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo HeapWalk SetFilePointer GetConsoleMode RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoA HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection VirtualAlloc HeapReAlloc HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA LCMapStringW

user32

CharUpperBuffW

winhttp

WinHttpCreateUrl

Sharing