file[.]exe | Triage™

General

Target
file.exe
Size 265KB
Sample230110-2v4headf8z
SHA256 60629b77f8cf4cbdeebbb340a5f7e28e60b3111a473d3906ebe922cecc9d7dde
MD5 a737acf54e8459ecb16e60d15ba7649f
SHA1 330aebad1b1e049f25e3ede6850f9d17ac883b03
SHA512 a8dff13817bad8f710fed8f4ff6d111651dd7d491d0e2524a4afb0f9c1afb2ff6fac4abc6bdee20d95275cdc22ce29f8e254848674a8f2e3a1136f612520e44d
SSDEEP 3072:2XE6Od4HhfLddCo7u95qS6jUGDKsRiApWWIS5rgpu/GVSeBNCanng0Pb:exBfLlu16IUTR/pOMrkNng6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 265KB

file.exe

IMPHASH 3c015aab1f0cbc91b9d5dc2efdec265b
SHA256 60629b77f8cf4cbdeebbb340a5f7e28e60b3111a473d3906ebe922cecc9d7dde
MD5 a737acf54e8459ecb16e60d15ba7649f
SHA1 330aebad1b1e049f25e3ede6850f9d17ac883b03
SHA512 a8dff13817bad8f710fed8f4ff6d111651dd7d491d0e2524a4afb0f9c1afb2ff6fac4abc6bdee20d95275cdc22ce29f8e254848674a8f2e3a1136f612520e44d
SSDEEP 3072:2XE6Od4HhfLddCo7u95qS6jUGDKsRiApWWIS5rgpu/GVSeBNCanng0Pb:exBfLlu16IUTR/pOMrkNng6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25265

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ContinueDebugEvent LCMapStringW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA SearchPathW VerifyVersionInfoW ExpandEnvironmentStringsW EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFlags GlobalFlags CopyFileW lstrlenW UpdateResourceA CreateActCtxW DeleteVolumeMountPointW InterlockedExchangeAdd MoveFileWithProgressW GetCurrentDirectoryW DeactivateActCtx MoveFileA GetLogicalDriveStringsA ResetEvent InterlockedPushEntrySList CreateMailslotW WriteConsoleInputW QueryDosDeviceA GetTempPathW InterlockedDecrement EnumTimeFormatsA SetFileValidData FindFirstFileA FreeEnvironmentStringsA LocalReAlloc GlobalAlloc GetTickCount SetLastError GetPrivateProfileStructW CopyFileExA GetTempPathA ReadConsoleInputA CreateDirectoryExW GetConsoleAliasA CreateMutexW LoadLibraryA MultiByteToWideChar GetLastError WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle HeapAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind VirtualAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA

gdi32

GetCharWidth32A GetCharABCWidthsA SelectObject GetTextFaceW GetBrushOrgEx

winhttp

WinHttpOpen

Sharing