file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample230108-wnkh3aec73
SHA256 fd7602a37185f951152308c2ce1b92fea264e9e53d80ff00e918a71871a74df9
MD5 6fd938309e46f566438fabaad9fb5113
SHA1 0eb57794ce9e734c41959e221b32457e79c92d73
SHA512 b20609314b07bb75f4f6e32390787e043cfc4a12edcc8cd94371c5a0ce70da39faaad32d171706fc3ab90458620c76903210e376341f4f0b72956bea3630ba78
SSDEEP 3072:lXhu5kM4vzLGQE3w3Cqd5n2c+03u2aaE327AHtN9hZCRRzMuWZgd3i:hJLGa3CqGEu2aaE32stZcqgd3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH 6dd4863b2aaa590ca706a9eb023bf170
SHA256 fd7602a37185f951152308c2ce1b92fea264e9e53d80ff00e918a71871a74df9
MD5 6fd938309e46f566438fabaad9fb5113
SHA1 0eb57794ce9e734c41959e221b32457e79c92d73
SHA512 b20609314b07bb75f4f6e32390787e043cfc4a12edcc8cd94371c5a0ce70da39faaad32d171706fc3ab90458620c76903210e376341f4f0b72956bea3630ba78
SSDEEP 3072:lXhu5kM4vzLGQE3w3Cqd5n2c+03u2aaE327AHtN9hZCRRzMuWZgd3i:hJLGa3CqGEu2aaE32stZcqgd3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25455

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExA ReadConsoleInputA GetTempPathW GetCurrentDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeW SearchPathA VerifyVersionInfoA GetProcessPriorityBoost EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFree GlobalFlags CopyFileW UpdateResourceW CreateActCtxW CopyFileA InterlockedExchangeAdd GetConsoleAliasW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA ResetEvent MoveFileExW CreateMailslotA WriteConsoleInputA QueryDosDeviceW InterlockedDecrement EnumTimeFormatsW lstrcatW FindFirstFileA FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError AllocateUserPhysicalPages GetPrivateProfileStructA CopyFileExA MoveFileWithProgressA LoadLibraryA GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

gdi32

GetTextFaceW

winhttp

WinHttpWriteData

Sharing