file[.]exe | Triage™

General

Target
file.exe
Size 145KB
Sample221003-mkcvdagae5
SHA256 bb03c84fc5ee756da865ec7235053935f555802ea3416f3fa81fbd0408d2f09c
MD5 32bcd7ff4765f1b80c07344053a42f48
SHA1 271acfac1ac7614c3974b4c27e27b617b31f57ed
SHA512 2feef7ff037609240d768d3bb05550cafefb14d5bc9ffc84ac08574bb7a1d8849a80becff4346507387f1742e627f53cdc491b5dae03560fe74c78afe9912537
SSDEEP 3072:nQiryavZCXuwrg7kx0CYVJ3OhJtSVVi0wSJnnFe:nQZW/Ohf6I0wkF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 145KB

file.exe

IMPHASH bd837f4e3a290baf0a388800378abc3f
SHA256 bb03c84fc5ee756da865ec7235053935f555802ea3416f3fa81fbd0408d2f09c
MD5 32bcd7ff4765f1b80c07344053a42f48
SHA1 271acfac1ac7614c3974b4c27e27b617b31f57ed
SHA512 2feef7ff037609240d768d3bb05550cafefb14d5bc9ffc84ac08574bb7a1d8849a80becff4346507387f1742e627f53cdc491b5dae03560fe74c78afe9912537
SSDEEP 3072:nQiryavZCXuwrg7kx0CYVJ3OhJtSVVi0wSJnnFe:nQZW/Ohf6I0wkF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19447

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA InterlockedPushEntrySList GetConsoleAliasesW ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameA LocalFree InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameW IsBadWritePtr FindResourceA GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA DeleteVolumeMountPointA GetCPInfo PostQueuedCompletionStatus MoveFileWithProgressA CopyFileA lstrcpynW WriteConsoleW GetBinaryTypeA WriteConsoleOutputW GetCommandLineA InterlockedIncrement CreateActCtxW FormatMessageA GetModuleHandleA LeaveCriticalSection GetStringTypeExA OpenMutexW FindResourceW RtlCaptureContext InterlockedExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd EnumDateFormatsA GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo HeapWalk SetFilePointer GetConsoleMode RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoA HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection VirtualAlloc HeapReAlloc HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA LCMapStringW

user32

CharUpperBuffW

winhttp

WinHttpCreateUrl

Sharing