file[.]exe | Triage™

General

Target
file.exe
Size 267KB
Sample230110-2v4headf81
SHA256 6686292ecfa89da549ea05da21979dde6fb3a002e8c864c2e0d21d8d41f8bedc
MD5 c02b6c4544f8902c9de20bc988f7f0f5
SHA1 ba31fbabd10337fecb27690d3cdf95b501a14355
SHA512 6571bbbcf534874989e7aba5e14902f75be8b307641f44dd9d1a2415334d73b6feb2b70023506f9c8991050019a429920f915d575f2d2846622c257f9284cc41
SSDEEP 3072:SXEpUMqHUkLUNXFb05OHsuyOD/P1NT7VpuhLBNCanng0Pb:Sx0kLCbYs/jfiNng6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 267KB

file.exe

IMPHASH 3c015aab1f0cbc91b9d5dc2efdec265b
SHA256 6686292ecfa89da549ea05da21979dde6fb3a002e8c864c2e0d21d8d41f8bedc
MD5 c02b6c4544f8902c9de20bc988f7f0f5
SHA1 ba31fbabd10337fecb27690d3cdf95b501a14355
SHA512 6571bbbcf534874989e7aba5e14902f75be8b307641f44dd9d1a2415334d73b6feb2b70023506f9c8991050019a429920f915d575f2d2846622c257f9284cc41
SSDEEP 3072:SXEpUMqHUkLUNXFb05OHsuyOD/P1NT7VpuhLBNCanng0Pb:Sx0kLCbYs/jfiNng6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25265

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ContinueDebugEvent LCMapStringW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA SearchPathW VerifyVersionInfoW ExpandEnvironmentStringsW EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFlags GlobalFlags CopyFileW lstrlenW UpdateResourceA CreateActCtxW DeleteVolumeMountPointW InterlockedExchangeAdd MoveFileWithProgressW GetCurrentDirectoryW DeactivateActCtx MoveFileA GetLogicalDriveStringsA ResetEvent InterlockedPushEntrySList CreateMailslotW WriteConsoleInputW QueryDosDeviceA GetTempPathW InterlockedDecrement EnumTimeFormatsA SetFileValidData FindFirstFileA FreeEnvironmentStringsA LocalReAlloc GlobalAlloc GetTickCount SetLastError GetPrivateProfileStructW CopyFileExA GetTempPathA ReadConsoleInputA CreateDirectoryExW GetConsoleAliasA CreateMutexW LoadLibraryA MultiByteToWideChar GetLastError WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle HeapAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind VirtualAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA

gdi32

GetCharWidth32A GetCharABCWidthsA SelectObject GetTextFaceW GetBrushOrgEx

winhttp

WinHttpOpen

Sharing