file[.]exe | Triage™

General

Target
file.exe
Size 365KB
Sample230106-aawtaadf97
SHA256 4a4e9d7d337871dc1d6b57436fd8f23c87398dd7731439e4de9ef9e896e1289c
MD5 f7cf9de5f6f29f5f44eb61c0997a906f
SHA1 894ba39054084fe13d6628a3b6efe587a0c3dc9a
SHA512 271863f13ac01c5cf95778804c0ece15d97e0be50d75e4fe9ded6ff4d3a40c8ad68d379b25446e7ddfd857303c2e0a16232a155678d8a9b68fd620ccf83a2d38
SSDEEP 6144:+5cL8Yb87lqX6eiVwBMPQXNABIr80kBiWHi8T1CUir/6lWpdykcVWz++d/N6r:CcVb87lqKVVwWQdABu80k3HhIUirS4dy
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 365KB

file.exe

IMPHASH 71a7b8362d37c5264550467f8b3e52de
SHA256 4a4e9d7d337871dc1d6b57436fd8f23c87398dd7731439e4de9ef9e896e1289c
MD5 f7cf9de5f6f29f5f44eb61c0997a906f
SHA1 894ba39054084fe13d6628a3b6efe587a0c3dc9a
SHA512 271863f13ac01c5cf95778804c0ece15d97e0be50d75e4fe9ded6ff4d3a40c8ad68d379b25446e7ddfd857303c2e0a16232a155678d8a9b68fd620ccf83a2d38
SSDEEP 6144:+5cL8Yb87lqX6eiVwBMPQXNABIr80kBiWHi8T1CUir/6lWpdykcVWz++d/N6r:CcVb87lqKVVwWQdABu80k3HhIUirS4dy
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24479

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW CreateDirectoryExW ReadConsoleInputA GetTempPathW GetCurrentDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA GetProcessPriorityBoost EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFree GlobalFlags GetModuleHandleA UpdateResourceA CreateActCtxW CopyFileW InterlockedExchangeAdd MoveFileWithProgressA GetConsoleAliasW CreateMutexA DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsW ResetEvent MoveFileExA CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess InterlockedDecrement SetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError GetPrivateProfileStructA CopyFileExW VerSetConditionMask LoadLibraryA CreateFileA CloseHandle GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

user32

GetComboBoxInfo

gdi32

SetBrushOrgEx

winhttp

WinHttpWriteData

Sharing