file[.]exe | Triage™

General

Target
file.exe
Size 225KB
Sample221223-2chg8ace2t
SHA256 e14a50b706f300595ed963827bdff00344ccd5a5a5f35cd1adb7eae5ca12c398
MD5 4fb71fea3c7e81451d8be33c65f9062b
SHA1 be2c922e707e8c703a3eb83d2d999d1c1210d105
SHA512 98cd4919e1f256653ee92bf3f8f6e761fb331d074bb4e27d5818556977ac8477687f32edba0cd4435fc22c153a2f5469680ddbf1aaf7772e7e0541d7b3eb9955
SSDEEP 3072:k1SOArjLhGJ45EUdsb3tgsgVb8hChZMjDMzE/GPghDVX5SKXPH8oSsknY3Ox6qQQ:USOaLh0zj9KVxOMzE/hpVJZ8o9UHk5o
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 225KB

file.exe

IMPHASH 9a3dd4fde851f0f6c3b4698d4a8fd6da
SHA256 e14a50b706f300595ed963827bdff00344ccd5a5a5f35cd1adb7eae5ca12c398
MD5 4fb71fea3c7e81451d8be33c65f9062b
SHA1 be2c922e707e8c703a3eb83d2d999d1c1210d105
SHA512 98cd4919e1f256653ee92bf3f8f6e761fb331d074bb4e27d5818556977ac8477687f32edba0cd4435fc22c153a2f5469680ddbf1aaf7772e7e0541d7b3eb9955
SSDEEP 3072:k1SOArjLhGJ45EUdsb3tgsgVb8hChZMjDMzE/GPghDVX5SKXPH8oSsknY3Ox6qQQ:USOaLh0zj9KVxOMzE/hpVJZ8o9UHk5o
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15884

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesA EnumDateFormatsA OpenMutexW GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedExchange DebugActiveProcess GetConsoleMode FindFirstVolumeA LocalFree LocalFlags InterlockedIncrement ProcessIdToSessionId OpenFileMappingW lstrcmpW AddRefActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynA GenerateConsoleCtrlEvent PeekNamedPipe CallNamedPipeW FindNextVolumeA CreateActCtxA OpenJobObjectA GetPrivateProfileIntA _lread FreeEnvironmentStringsW SetVolumeMountPointW VirtualAlloc GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomA CopyFileW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeA CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedCompareExchange InterlockedExchangeAdd GetModuleHandleW GetTickCount SetLastError GetLogicalDrives GetCurrencyFormatW LoadLibraryA GetLastError WideCharToMultiByte HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

winhttp

WinHttpWriteData

Sharing