file[.]exe | Triage™

General

Target
file.exe
Size 259KB
Sample230108-v6lcmsec28
SHA256 ac1fb80036824fac4e75481b27ff015780f183b38b0809635edf4a66f2334670
MD5 af6b8c49770a9a56d3f7a6c69267ecd0
SHA1 a59a27231613313c24f8728b00c94e97ab13ce5f
SHA512 f7c9de0bf36d4711e5aabbc3557b14307bf878925d1c6226a3298789c48929433eb15f4057bb72df1bec3d62d8fc534fa78490259beae464a9c62ef68db55df2
SSDEEP 3072:YXh4GaTSxL8TuoXjMn2DxR+5AbhQmO+xZ0yA/rfpdrjpxO0v+UZNTKXWPr0sdt:sDLnd2DxRvb+xdXJ7OuNt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 259KB

file.exe

IMPHASH 649b2ae4796ce3516b8fb64ca992543b
SHA256 ac1fb80036824fac4e75481b27ff015780f183b38b0809635edf4a66f2334670
MD5 af6b8c49770a9a56d3f7a6c69267ecd0
SHA1 a59a27231613313c24f8728b00c94e97ab13ce5f
SHA512 f7c9de0bf36d4711e5aabbc3557b14307bf878925d1c6226a3298789c48929433eb15f4057bb72df1bec3d62d8fc534fa78490259beae464a9c62ef68db55df2
SSDEEP 3072:YXh4GaTSxL8TuoXjMn2DxR+5AbhQmO+xZ0yA/rfpdrjpxO0v+UZNTKXWPr0sdt:sDLnd2DxRvb+xdXJ7OuNt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24703

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExA ReadConsoleInputA GetTempPathW GetCurrentDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeW SearchPathA VerifyVersionInfoA GetProcessPriorityBoost EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFree GlobalFlags CopyFileW UpdateResourceW CreateActCtxA CopyFileA InterlockedExchangeAdd GetConsoleAliasW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA ResetEvent MoveFileExW CreateMailslotA WriteConsoleInputA QueryDosDeviceW InterlockedDecrement EnumTimeFormatsW lstrcatW FindFirstFileA FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError AllocateUserPhysicalPages GetPrivateProfileStructA CopyFileExA MoveFileWithProgressA LoadLibraryA GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

gdi32

GetTextFaceW

winhttp

WinHttpWriteData

Sharing