file[.]exe | Triage™

General

Target
file.exe
Size 416KB
Sample230108-halx3sch79
SHA256 1c2d944b83f98a0edde0780110dad14d4ff382f4d5e9005612dbe3c3bf17cebf
MD5 9585e4c3b8589d6b2c8570577e9f0434
SHA1 17d1afe43ccbf46f62664de7034aa7ce49898829
SHA512 b2769496982be1e9320fd91e00a664e8c5ae4f4b88c0d68acad4474f3f1a68ac333841288719eeb15b1d00748973388a08aa98678d53db24e60c8057c1e34ba7
SSDEEP 6144:bzL+cQ/t0r0ow/MdpZBn6TIASfKPwSIMFjUHZTpphM3Gu6aNtUE4x6OjOuN:bzSt/t0r0owMdpZBBKPwkVaiN6rDJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 416KB

file.exe

IMPHASH 2a53ffd9ea97aa99a0d0e873e4f019d6
SHA256 1c2d944b83f98a0edde0780110dad14d4ff382f4d5e9005612dbe3c3bf17cebf
MD5 9585e4c3b8589d6b2c8570577e9f0434
SHA1 17d1afe43ccbf46f62664de7034aa7ce49898829
SHA512 b2769496982be1e9320fd91e00a664e8c5ae4f4b88c0d68acad4474f3f1a68ac333841288719eeb15b1d00748973388a08aa98678d53db24e60c8057c1e34ba7
SSDEEP 6144:bzL+cQ/t0r0ow/MdpZBn6TIASfKPwSIMFjUHZTpphM3Gu6aNtUE4x6OjOuN:bzSt/t0r0owMdpZBBKPwkVaiN6rDJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24639

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW CreateDirectoryExW ReadConsoleInputA GetTempPathA GetCurrentDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA GetProcessPriorityBoost EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFree GlobalFlags GetModuleHandleA UpdateResourceW CreateActCtxW CopyFileW InterlockedExchangeAdd MoveFileWithProgressA GetConsoleAliasW CreateMutexA DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsW ResetEvent MoveFileExA CreateMailslotA WriteConsoleInputA QueryDosDeviceW GetCurrentProcess InterlockedDecrement SetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError GetPrivateProfileStructA CopyFileExW VerSetConditionMask LoadLibraryA CreateFileA CloseHandle GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

user32

GetComboBoxInfo

gdi32

SetBrushOrgEx

winhttp

WinHttpWriteData

Sharing