file[.]exe | Triage™

General

Target
file.exe
Size 151KB
Sample221127-pxxfnagh93
SHA256 be8f033146f50a3db2af5c2b2c56716ffe3626e5c39393d5adcb5d581c9f2535
MD5 063cfb4249aea7eae3db54acf625023d
SHA1 c5ab76b57464f4d0844315bb66ec7fb19c89c678
SHA512 1ac64a92010a72a380d6d8eec5e1268ea315a73dd5499d7b1b7058702cbbdc950fc8a24b5432893263c93c3f54fa59c9fb67e5321b693cbdd7a132047035ca38
SSDEEP 3072:4rMFwq4ionfES8FxOcW5PpE6jpsUw1yC56nCUr2b5:zbPSCxOPpNpr1t6b
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 151KB

file.exe

IMPHASH afef8a51e0a52cedd9efd1b0266e70c1
SHA256 be8f033146f50a3db2af5c2b2c56716ffe3626e5c39393d5adcb5d581c9f2535
MD5 063cfb4249aea7eae3db54acf625023d
SHA1 c5ab76b57464f4d0844315bb66ec7fb19c89c678
SHA512 1ac64a92010a72a380d6d8eec5e1268ea315a73dd5499d7b1b7058702cbbdc950fc8a24b5432893263c93c3f54fa59c9fb67e5321b693cbdd7a132047035ca38
SSDEEP 3072:4rMFwq4ionfES8FxOcW5PpE6jpsUw1yC56nCUr2b5:zbPSCxOPpNpr1t6b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20279

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsW OpenMutexW GetConsoleAliasExesLengthA CopyFileExW ReadConsoleOutputCharacterW FillConsoleOutputAttribute GetCommConfig QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost CreateJobSet AddConsoleAliasW CreateFileA SetMailslotInfo GetWindowsDirectoryW GetModuleHandleA GlobalHandle CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeW CreateMailslotW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateProcess WriteConsoleOutputA GetCommandLineW EnumSystemCodePagesW VerifyVersionInfoA CancelTimerQueueTimer SearchPathW CopyFileA GetHandleInformation FindResourceA GetModuleHandleW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeW LocalUnlock InterlockedIncrement CloseHandle GetTickCount GetShortPathNameA DeviceIoControl HeapLock GetConsoleTitleA InterlockedCompareExchange EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateA GenerateConsoleCtrlEvent MoveFileW AddAtomW WriteConsoleInputW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointW VirtualProtect _hread ClearCommBreak SetProcessPriorityBoost GlobalFindAtomA GetMailslotInfo HeapWalk SetFilePointer GetVolumeInformationA FindFirstChangeNotificationW LoadLibraryW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpWriteData

Sharing