file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample230106-b339haea22
SHA256 0eb58f70c335baeddb9fda987a0e2b018fb744d204effb95fa4280e0c1ae04da
MD5 ea590281584237c6acb83dff396772cf
SHA1 e9d65b899a82a0ef48174c6b5ae2c347ad6a8862
SHA512 bb13fcdfaba1074da5f52b359ac6b8488893da3531b02a6f608ee5c04fcc0b95da8225e4a84ca9a215e1fe361ed2460eb14bc0e797c1f3ddadedbcde623bc901
SSDEEP 3072:D9Xh7IJH3SLaSPp2hTAa+5qyPfz48Zy1Wk6EytnMNThUhQ5NvN:D59La7hTAaA88IQMkGThWQ53
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH 71a7b8362d37c5264550467f8b3e52de
SHA256 0eb58f70c335baeddb9fda987a0e2b018fb744d204effb95fa4280e0c1ae04da
MD5 ea590281584237c6acb83dff396772cf
SHA1 e9d65b899a82a0ef48174c6b5ae2c347ad6a8862
SHA512 bb13fcdfaba1074da5f52b359ac6b8488893da3531b02a6f608ee5c04fcc0b95da8225e4a84ca9a215e1fe361ed2460eb14bc0e797c1f3ddadedbcde623bc901
SSDEEP 3072:D9Xh7IJH3SLaSPp2hTAa+5qyPfz48Zy1Wk6EytnMNThUhQ5NvN:D59La7hTAaA88IQMkGThWQ53
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24479

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW CreateDirectoryExW ReadConsoleInputA GetTempPathW GetCurrentDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA GetProcessPriorityBoost EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFree GlobalFlags GetModuleHandleA UpdateResourceA CreateActCtxW CopyFileW InterlockedExchangeAdd MoveFileWithProgressA GetConsoleAliasW CreateMutexA DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsW ResetEvent MoveFileExA CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess InterlockedDecrement SetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError GetPrivateProfileStructA CopyFileExW VerSetConditionMask LoadLibraryA CreateFileA CloseHandle GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

user32

GetComboBoxInfo

gdi32

SetBrushOrgEx

winhttp

WinHttpWriteData

Sharing