file[.]exe | Triage™

General

Target
file.exe
Size 259KB
Sample230108-ye8kmsaa2z
SHA256 6b81d56413849e29ccee1c88e63353e2c1de601ea8cee93e58f838950e65e6d5
MD5 7951133a18d4b982467e94cb6dd17115
SHA1 a42c0218688b2e5973cfa5f19652a5abf5c4793c
SHA512 654086896cf1c387de52596d76a9ec2779ee4b00d40f68da8377b045905e48db64d78a2883546f4aeb4bca2fdc6f97bb6b96cb0be88ab1dec2f3a9e51b0ab5fc
SSDEEP 3072:nXhEG8wwHuLX14MBfVPG5FkCfXGAzycS9zNDgY08P7xAVUXCm9hZCRRzMuWZgd3i:X8w/LXhfVPXqZzS9zRjCscqgd3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 259KB

file.exe

IMPHASH 6dd4863b2aaa590ca706a9eb023bf170
SHA256 6b81d56413849e29ccee1c88e63353e2c1de601ea8cee93e58f838950e65e6d5
MD5 7951133a18d4b982467e94cb6dd17115
SHA1 a42c0218688b2e5973cfa5f19652a5abf5c4793c
SHA512 654086896cf1c387de52596d76a9ec2779ee4b00d40f68da8377b045905e48db64d78a2883546f4aeb4bca2fdc6f97bb6b96cb0be88ab1dec2f3a9e51b0ab5fc
SSDEEP 3072:nXhEG8wwHuLX14MBfVPG5FkCfXGAzycS9zNDgY08P7xAVUXCm9hZCRRzMuWZgd3i:X8w/LXhfVPXqZzS9zRjCscqgd3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25455

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExA ReadConsoleInputA GetTempPathW GetCurrentDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeW SearchPathA VerifyVersionInfoA GetProcessPriorityBoost EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFree GlobalFlags CopyFileW UpdateResourceW CreateActCtxW CopyFileA InterlockedExchangeAdd GetConsoleAliasW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA ResetEvent MoveFileExW CreateMailslotA WriteConsoleInputA QueryDosDeviceW InterlockedDecrement EnumTimeFormatsW lstrcatW FindFirstFileA FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError AllocateUserPhysicalPages GetPrivateProfileStructA CopyFileExA MoveFileWithProgressA LoadLibraryA GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

gdi32

GetTextFaceW

winhttp

WinHttpWriteData

Sharing