file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample230109-c5akmsgd2s
SHA256 08b84e41e607f44ed369ea2f3b512254d6df9e8f0a4733d6ecfb0bf353b30c16
MD5 b8795c3b21fa7d26805ee752ffec36b0
SHA1 1d4be22833ed6c85cce76f808eb555e4a8c06ac5
SHA512 c87d9e160c476b09ade63bb1c55ea1fe29a6af59904cc180f109d6b98e9261145bfde17a562b00e2e3c3189761cf85a7194e7e8d33155023a2253ac1d3a56478
SSDEEP 3072:q4WXES4C/sLXBVq7ADgD151jAXAi5FNJFqy2fALIEvV8u7AN/YKL9hZCRRzMuWZi:qJAL/q7ADg6Qi5FyAL58uGcqgd3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH 548dbc61a50c5d0aa439debd4518e29e
SHA256 08b84e41e607f44ed369ea2f3b512254d6df9e8f0a4733d6ecfb0bf353b30c16
MD5 b8795c3b21fa7d26805ee752ffec36b0
SHA1 1d4be22833ed6c85cce76f808eb555e4a8c06ac5
SHA512 c87d9e160c476b09ade63bb1c55ea1fe29a6af59904cc180f109d6b98e9261145bfde17a562b00e2e3c3189761cf85a7194e7e8d33155023a2253ac1d3a56478
SSDEEP 3072:q4WXES4C/sLXBVq7ADgD151jAXAi5FNJFqy2fALIEvV8u7AN/YKL9hZCRRzMuWZi:qJAL/q7ADg6Qi5FyAL58uGcqgd3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26033

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExA ReadConsoleInputA GetTempPathW GetCurrentDirectoryW ContinueDebugEvent LCMapStringW GetProcAddress LocalAlloc GetBinaryTypeW SearchPathA VerifyVersionInfoA GetProcessPriorityBoost EndUpdateResourceA FindNextFileW FindFirstVolumeW LocalFree GlobalFlags CopyFileW UpdateResourceW CreateActCtxW DeleteVolumeMountPointW InterlockedExchangeAdd GetConsoleAliasA VerSetConditionMask CreateMutexA DeactivateActCtx GetDiskFreeSpaceW MoveFileW GetLogicalDriveStringsA ResetEvent InterlockedPushEntrySList CreateMailslotA WriteConsoleInputA QueryDosDeviceA InterlockedDecrement EnumTimeFormatsW SetFileValidData FindFirstFileA FreeEnvironmentStringsW SetErrorMode GetTickCount SetLastError AllocateUserPhysicalPages GetPrivateProfileStructA CopyFileExA MoveFileWithProgressA LoadLibraryA GetLastError WideCharToMultiByte DeleteFileA GetStartupInfoW GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle HeapAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind VirtualAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CreateFileA

gdi32

GetTextFaceW

winhttp

WinHttpSetCredentials

Sharing