file[.]exe | Triage™

General

Target
file.exe
Size 264KB
Sample230108-ppg11agh81
SHA256 5cc3e15ccc14f79b7a902c5d09b4acba913eda5a3f0eb28b67ec8a007b29fd85
MD5 2a133f0dfb57778e3392bac1dadff377
SHA1 6f9389fb7a7b8924d95c7576c2417ca20e78274e
SHA512 324807fef27979d5279547b6a24d7d1edf40f45a155b0274c9e8fcd3283a902945363ce8089d22c4b6326aff5b0a45326b32f305bc7a7e54f8db558bffd4bfab
SSDEEP 3072:2Xh01OyLHO3LBQnp5N5Eiuklfq9vk1gyjqntOJoOI5ozdKSBppxOxUZNTKXWPr0+:eCLH5np5Ei1wlDntOGOI5k/p/OuN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 264KB

file.exe

IMPHASH b49d1773872141620d6e88f1989600b7
SHA256 5cc3e15ccc14f79b7a902c5d09b4acba913eda5a3f0eb28b67ec8a007b29fd85
MD5 2a133f0dfb57778e3392bac1dadff377
SHA1 6f9389fb7a7b8924d95c7576c2417ca20e78274e
SHA512 324807fef27979d5279547b6a24d7d1edf40f45a155b0274c9e8fcd3283a902945363ce8089d22c4b6326aff5b0a45326b32f305bc7a7e54f8db558bffd4bfab
SSDEEP 3072:2Xh01OyLHO3LBQnp5N5Eiuklfq9vk1gyjqntOJoOI5ozdKSBppxOxUZNTKXWPr0+:eCLH5np5Ei1wlDntOGOI5k/p/OuN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24511

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExA ReadConsoleInputA GetTempPathW GetCurrentDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeW SearchPathA VerifyVersionInfoA GetProcessPriorityBoost EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFree GlobalFlags UpdateResourceW CreateActCtxA CopyFileW InterlockedExchangeAdd GetConsoleAliasW VerSetConditionMask CreateMutexA DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA ResetEvent MoveFileExW CreateMailslotA WriteConsoleInputA QueryDosDeviceW InterlockedDecrement EnumTimeFormatsW lstrcatW FindFirstFileA FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError AllocateUserPhysicalPages GetPrivateProfileStructA CopyFileExA MoveFileWithProgressA LoadLibraryA GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

gdi32

GetTextFaceA

winhttp

WinHttpWriteData

Sharing