file[.]exe | Triage™

General

Target
file.exe
Size 233KB
Sample221115-atghpsec63
SHA256 151d77b828545660aef7e358ebbb223920dab5085a69b538b8146ff43cce9d16
MD5 88c500b3eef202685e39502ccff22c54
SHA1 a56d9177d6c85c8ac22730e317471a9038e960b2
SHA512 aa4b2d38c1adb18772baedc023ec8ec8ca634d848705c79ca8180c39e4ab326119ae611ce7b7adb756e3958b281c6e705810ca4dba0c80804d4fd83af748e818
SSDEEP 3072:VXOa6DYYdKLpU8glVdW/FFX4ohTS8J9y4IzcLVlOQBIvCCT:RAcSKLpwlVd4FZ3J9yt8VlOek
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 233KB

file.exe

IMPHASH 40a4dcf55096fd2511a4f1eb7d8ccdb1
SHA256 151d77b828545660aef7e358ebbb223920dab5085a69b538b8146ff43cce9d16
MD5 88c500b3eef202685e39502ccff22c54
SHA1 a56d9177d6c85c8ac22730e317471a9038e960b2
SHA512 aa4b2d38c1adb18772baedc023ec8ec8ca634d848705c79ca8180c39e4ab326119ae611ce7b7adb756e3958b281c6e705810ca4dba0c80804d4fd83af748e818
SSDEEP 3072:VXOa6DYYdKLpU8glVdW/FFX4ohTS8J9y4IzcLVlOQBIvCCT:RAcSKLpwlVd4FZ3J9yt8VlOek
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26767

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW lstrlenW LCMapStringA SetProcessAffinityMask GetProfileIntA GetLastError GetProcAddress VirtualAlloc CopyFileA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetModuleHandleA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetConsoleAliasesW GetSystemDefaultLangID RaiseException Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

user32

ClientToScreen

advapi32

BackupEventLogW

winhttp

WinHttpSetTimeouts

Sharing