file[.]exe | Triage™

General

Target
file.exe
Size 499KB
Sample230104-pp2qeafd49
SHA256 fbcfad978fc7ff59912a00a53c28b78564a46e31c582d5d3f51fbd06f0bbb913
MD5 d4dc7e78eb5339d75dd7d140fc6f707c
SHA1 31f82ba813d568aeb9d08f8b3ddc31d6b04fa74b
SHA512 b55bc01d04ba3108db8f8cbc1b77bdff252dedbe11ce266061001e4b4224ca8a635a1715b65fd81811da0f1cc0f7ea42f1ffc2b9483471d810548ab68e52f193
SSDEEP 6144:c4LHnVOD5JzoBNNFUKo5M269bd2ik0wYsw6U/oxupmLAhsvhjTH:c4ROTzoBNs5G9bdiw6SoxupmLA2v
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 499KB

file.exe

IMPHASH ab08f161f3c3e1e0bc075590fcc42065
SHA256 fbcfad978fc7ff59912a00a53c28b78564a46e31c582d5d3f51fbd06f0bbb913
MD5 d4dc7e78eb5339d75dd7d140fc6f707c
SHA1 31f82ba813d568aeb9d08f8b3ddc31d6b04fa74b
SHA512 b55bc01d04ba3108db8f8cbc1b77bdff252dedbe11ce266061001e4b4224ca8a635a1715b65fd81811da0f1cc0f7ea42f1ffc2b9483471d810548ab68e52f193
SSDEEP 6144:c4LHnVOD5JzoBNNFUKo5M269bd2ik0wYsw6U/oxupmLAhsvhjTH:c4ROTzoBNs5G9bdiw6SoxupmLA2v
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25598

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW FreeEnvironmentStringsA GetTickCount ReadConsoleW GetVolumePathNameW LoadLibraryW GetConsoleAliasW GetFileAttributesW MulDiv WriteConsoleW GetEnvironmentVariableA InterlockedExchange ReleaseActCtx GetCPInfoExW SetLastError GetProcAddress VirtualAlloc ResetEvent GetSystemWindowsDirectoryW LoadLibraryA OpenMutexA WriteConsoleA AddVectoredExceptionHandler SetProcessWorkingSetSize SetCommMask GetModuleHandleA FindFirstChangeNotificationA OpenFileMappingW VirtualProtect GetFileAttributesExW WaitForDebugEvent GetCurrentThreadId FindActCtxSectionStringW GetConsoleSelectionInfo LCMapStringW GlobalAddAtomA EndUpdateResourceW DeleteVolumeMountPointA TlsGetValue SetCriticalSectionSpinCount GetComputerNameA MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RtlUnwind RaiseException SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

BackupEventLogW IsTokenUntrusted RegQueryInfoKeyA CloseEventLog

winhttp

WinHttpOpen

Sharing