file[.]exe | Triage™

General

Target
file.exe
Size 233KB
Sample221114-2c5bzsdh95
SHA256 99cf3191af8b62af5fdaf338ce2dfb3d5301a63eea5422827d7ca015f460d206
MD5 0ef19e76d10430b6baaa262218162a10
SHA1 eae1161378ea70950e36f9e19f306ab0d7041a1b
SHA512 488bccfeada593be770133b4ca1be1d496763a174d80b0e8ee38e726b807eb70dcefdd56e3d777388eec4430d6f459bc868c37a861d875d7038b807a7e8c7d58
SSDEEP 3072:DXO5i2tsLTUItbfGJlcxzY5tKZarHvnl8f+/LVRCEXpHN3nv69+1oPn:745sLTZbfecY3KGHtYu5RnXpHtnB1o
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 233KB

file.exe

IMPHASH 99b7145610da9b442c2058e4f845369b
SHA256 99cf3191af8b62af5fdaf338ce2dfb3d5301a63eea5422827d7ca015f460d206
MD5 0ef19e76d10430b6baaa262218162a10
SHA1 eae1161378ea70950e36f9e19f306ab0d7041a1b
SHA512 488bccfeada593be770133b4ca1be1d496763a174d80b0e8ee38e726b807eb70dcefdd56e3d777388eec4430d6f459bc868c37a861d875d7038b807a7e8c7d58
SSDEEP 3072:DXO5i2tsLTUItbfGJlcxzY5tKZarHvnl8f+/LVRCEXpHN3nv69+1oPn:745sLTZbfecY3KGHtYu5RnXpHtnB1o
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26735

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW lstrlenW LCMapStringA GetConsoleAliasesW SetProcessAffinityMask GetLastError GetProcAddress VirtualAlloc CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetProfileIntA GetSystemDefaultLangID RaiseException Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

user32

ClientToScreen

advapi32

BackupEventLogW

winhttp

WinHttpSetTimeouts

Sharing