file[.]exe | Triage™

General

Target
file.exe
Size 272KB
Sample221116-hmgtwshe72
SHA256 97edd835c8486aaa83aa9249fa96aa6e0e1a3ecfdbf0a4a18774113b93a656bd
MD5 049da72bf2092c928290269cf63fbbe0
SHA1 8f6831b0fe2744c5d99e206cb2d710ec7fdf8c0d
SHA512 6087bf52c60fa6daa3ce4a2553d7214bf8ea04ef87919ad61397b5d279085a541612b78ae1e1cd663c8c0fa996431a9f14c06e22f0a99cc9bbcb0e70844d9244
SSDEEP 6144:/Bd8tLHMS/VLj610DRvQC0E/qC/0NuirX:JdOrMS/N+QeIsNl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 272KB

file.exe

IMPHASH b0ece2a263d3cf7672afdc5a35e02148
SHA256 97edd835c8486aaa83aa9249fa96aa6e0e1a3ecfdbf0a4a18774113b93a656bd
MD5 049da72bf2092c928290269cf63fbbe0
SHA1 8f6831b0fe2744c5d99e206cb2d710ec7fdf8c0d
SHA512 6087bf52c60fa6daa3ce4a2553d7214bf8ea04ef87919ad61397b5d279085a541612b78ae1e1cd663c8c0fa996431a9f14c06e22f0a99cc9bbcb0e70844d9244
SSDEEP 6144:/Bd8tLHMS/VLj610DRvQC0E/qC/0NuirX:JdOrMS/N+QeIsNl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26735

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW lstrlenA GetStringTypeA OpenJobObjectA GetCommState WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW SetProcessAffinityMask GetLastError GetProcAddress VirtualAlloc CopyFileA LoadLibraryA GetProcessWorkingSetSize LocalAlloc GetModuleHandleA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetConsoleAliasesW GetSystemDefaultLangID RaiseException Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

user32

ClientToScreen

advapi32

BackupEventLogW

winhttp

WinHttpSetTimeouts

Sharing