file[.]exe | Triage™

General

Target
file.exe
Size 146KB
Sample221003-t78nwsfca4
SHA256 4596c152ce4504bfd7685b250201e8215a2f50e39ff4cdfc24bc9c8eb8ff453c
MD5 efedd6769b976de1e1472bd8544f6717
SHA1 ff5a445bbd943858646028b6e22d7ba042459326
SHA512 4d97beb1934f074f3602784db2483daf246f38a408dabf6aeb9eec1b514370c5550d017e790d7a60c50b19fa6c030931dde4f6c48f354f2c05078a56c9d4296e
SSDEEP 3072:Dii13uaNOvwkb20PXIBe+EDZQ6kFPD8rKiP/O:Dioj0P4Be+EDZQ6Wb8mw/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 146KB

file.exe

IMPHASH c9c09dee9cb4e9617f155f42be2e2cc0
SHA256 4596c152ce4504bfd7685b250201e8215a2f50e39ff4cdfc24bc9c8eb8ff453c
MD5 efedd6769b976de1e1472bd8544f6717
SHA1 ff5a445bbd943858646028b6e22d7ba042459326
SHA512 4d97beb1934f074f3602784db2483daf246f38a408dabf6aeb9eec1b514370c5550d017e790d7a60c50b19fa6c030931dde4f6c48f354f2c05078a56c9d4296e
SSDEEP 3072:Dii13uaNOvwkb20PXIBe+EDZQ6kFPD8rKiP/O:Dioj0P4Be+EDZQ6Wb8mw/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19447

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA InterlockedPushEntrySList GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameA LocalFree InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceA GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA DeleteVolumeMountPointA GetCPInfo GetQueuedCompletionStatus MoveFileWithProgressA CopyFileA lstrcpynW WriteConsoleW GetBinaryTypeW WriteConsoleOutputA GetCommandLineA InterlockedIncrement CreateActCtxW FormatMessageA GetModuleHandleW GetModuleHandleA EnterCriticalSection GetStringTypeExA OpenMutexW FindResourceW RtlCaptureContext InterlockedExchange InitializeCriticalSectionAndSpinCount DeleteFiber InterlockedExchangeAdd EnumDateFormatsA GetPrivateProfileStructA GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo HeapWalk SetFilePointer SetConsoleMode RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoA HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA LCMapStringW

user32

CharUpperBuffW

winhttp

WinHttpCreateUrl

Sharing