file[.]exe | Triage™

General

Target
file.exe
Size 259KB
Sample230108-y698jsab5v
SHA256 454bbdd44e614305be5b723dd0df8cb3c717decf06185a87e4da4e26ce7e59f7
MD5 5f8c33926f110029ad96e56bc62fb609
SHA1 5ec741995adefe12957a8d1fc07de7bf7c8cb1a0
SHA512 4c84650c9816a7ef9cd7c8f1bb6200e8e0cf51e9b0aa0050d7f2f40079ad791b3b895d8a4e1d5d358ab77fda2fe726c7536ecde1d6d271e6bb91e37c4892ce92
SSDEEP 3072:eXhto1QxZ2LL8qK5jb8X5WZL2zwWAMWeWgg0N+xS9E48n+A9/9hZCRRzMuWZgd3i:m72LLSjb84ZCDAMWeWyySMlcqgd3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 259KB

file.exe

IMPHASH 6dd4863b2aaa590ca706a9eb023bf170
SHA256 454bbdd44e614305be5b723dd0df8cb3c717decf06185a87e4da4e26ce7e59f7
MD5 5f8c33926f110029ad96e56bc62fb609
SHA1 5ec741995adefe12957a8d1fc07de7bf7c8cb1a0
SHA512 4c84650c9816a7ef9cd7c8f1bb6200e8e0cf51e9b0aa0050d7f2f40079ad791b3b895d8a4e1d5d358ab77fda2fe726c7536ecde1d6d271e6bb91e37c4892ce92
SSDEEP 3072:eXhto1QxZ2LL8qK5jb8X5WZL2zwWAMWeWgg0N+xS9E48n+A9/9hZCRRzMuWZgd3i:m72LLSjb84ZCDAMWeWyySMlcqgd3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25455

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExA ReadConsoleInputA GetTempPathW GetCurrentDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeW SearchPathA VerifyVersionInfoA GetProcessPriorityBoost EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFree GlobalFlags CopyFileW UpdateResourceW CreateActCtxW CopyFileA InterlockedExchangeAdd GetConsoleAliasW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA ResetEvent MoveFileExW CreateMailslotA WriteConsoleInputA QueryDosDeviceW InterlockedDecrement EnumTimeFormatsW lstrcatW FindFirstFileA FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError AllocateUserPhysicalPages GetPrivateProfileStructA CopyFileExA MoveFileWithProgressA LoadLibraryA GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

gdi32

GetTextFaceW

winhttp

WinHttpWriteData

Sharing