file[.]exe | Triage™

General

Target
file.exe
Size 418KB
Sample230110-3hqapaaa35
SHA256 634dc0c8d9d91b7497b994003fac0ff910c42fe961da8c030db8920237c97d37
MD5 87622d358176afa449bbbaa04e61d178
SHA1 e5bde092bdaa000a959e4174238e7b240acc3e52
SHA512 699fe9ce3630f8208ecfb1b02426adecb29f932f9b16c3dceae93b85fe0f6c468ebc88d9f1fd33f1689cef41bc76546791f987a9c97d39fd0d40fb1811bcfa8f
SSDEEP 6144:MNdLlXFafAKwvFAjPdEsBYkPL5CPbolL/PpuONng6:MNdJX4fAK15EmGCbNnd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 418KB

file.exe

IMPHASH 3c015aab1f0cbc91b9d5dc2efdec265b
SHA256 634dc0c8d9d91b7497b994003fac0ff910c42fe961da8c030db8920237c97d37
MD5 87622d358176afa449bbbaa04e61d178
SHA1 e5bde092bdaa000a959e4174238e7b240acc3e52
SHA512 699fe9ce3630f8208ecfb1b02426adecb29f932f9b16c3dceae93b85fe0f6c468ebc88d9f1fd33f1689cef41bc76546791f987a9c97d39fd0d40fb1811bcfa8f
SSDEEP 6144:MNdLlXFafAKwvFAjPdEsBYkPL5CPbolL/PpuONng6:MNdJX4fAK15EmGCbNnd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25265

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ContinueDebugEvent LCMapStringW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA SearchPathW VerifyVersionInfoW ExpandEnvironmentStringsW EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFlags GlobalFlags CopyFileW lstrlenW UpdateResourceA CreateActCtxW DeleteVolumeMountPointW InterlockedExchangeAdd MoveFileWithProgressW GetCurrentDirectoryW DeactivateActCtx MoveFileA GetLogicalDriveStringsA ResetEvent InterlockedPushEntrySList CreateMailslotW WriteConsoleInputW QueryDosDeviceA GetTempPathW InterlockedDecrement EnumTimeFormatsA SetFileValidData FindFirstFileA FreeEnvironmentStringsA LocalReAlloc GlobalAlloc GetTickCount SetLastError GetPrivateProfileStructW CopyFileExA GetTempPathA ReadConsoleInputA CreateDirectoryExW GetConsoleAliasA CreateMutexW LoadLibraryA MultiByteToWideChar GetLastError WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle HeapAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind VirtualAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA

gdi32

GetCharWidth32A GetCharABCWidthsA SelectObject GetTextFaceW GetBrushOrgEx

winhttp

WinHttpOpen

Sharing