file[.]exe | Triage™

General

Target
file.exe
Size 366KB
Sample230104-fejbmsdh73
SHA256 79dbd3cf2e2673d4a3d3815f75e1ba8d83172cedf890d7ee173ae5d6acbd00e5
MD5 6fe93d089cd238d1bb1287780c75b7a5
SHA1 edf9694e4d84768b46d989f0199c59e2e94eaf3d
SHA512 8cc71cff8cbf4ce77d56e9d0ef6a92937ea09d6c15102324d818dfc415f1fb9d9f1730ef2a517e824370313a702841f8f0a5845aeaaf543e452cda58c74d21f7
SSDEEP 6144:NTpwLJKROeNrkLVq6TTCXUuv3KDycAyjFvJEMbxHdYrb:JKwR9rnosUuvaDPAyxfV9Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 366KB

file.exe

IMPHASH 7ee289e4925dac0bb3762646578db625
SHA256 79dbd3cf2e2673d4a3d3815f75e1ba8d83172cedf890d7ee173ae5d6acbd00e5
MD5 6fe93d089cd238d1bb1287780c75b7a5
SHA1 edf9694e4d84768b46d989f0199c59e2e94eaf3d
SHA512 8cc71cff8cbf4ce77d56e9d0ef6a92937ea09d6c15102324d818dfc415f1fb9d9f1730ef2a517e824370313a702841f8f0a5845aeaaf543e452cda58c74d21f7
SSDEEP 6144:NTpwLJKROeNrkLVq6TTCXUuv3KDycAyjFvJEMbxHdYrb:JKwR9rnosUuvaDPAyxfV9Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26094

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW GetSystemWindowsDirectoryW GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount ReadConsoleW LoadLibraryW GetConsoleAliasW LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc GetConsoleDisplayMode GlobalAddAtomA ResetEvent LoadLibraryA WriteConsoleA SetProcessWorkingSetSize SetCommMask GetModuleHandleA FindFirstChangeNotificationA ContinueDebugEvent OpenFileMappingW VirtualProtect GetCurrentThreadId GetConsoleSelectionInfo TlsGetValue DeleteVolumeMountPointA FreeResource GetComputerNameA FlushFileBuffers MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapReAlloc LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RtlUnwind RaiseException SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

advapi32

BackupEventLogW CloseEventLog

winhttp

WinHttpOpen WinHttpReadData

Sharing