file[.]exe | Triage™

General

Target
file.exe
Size 268KB
Sample230111-af2xgsaa86
SHA256 e24c8a80a918fcea7a059873d6cfed50ce38002d4a69e4e733f97e0f123239ae
MD5 853b3c0538e3e7755b3281e067754256
SHA1 7060426ff54355ab145f8b7f6cd94a1d8f365986
SHA512 4b870d777abb5b228ef1e1943a98539fbbff9c58b0c13815f8f32c4297c6bb0087dc45f796d6d6510353cf3e10673f56129a6d85b2c1f1fd301ed3753789d5e2
SSDEEP 3072:sXEJGw99MrLqFjbWAt5iaKnaCGPfBYaRKBj58G8jpu/bBNCanng0Pb:o/PrLDACaTPfBZAf8iNng6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 268KB

file.exe

IMPHASH aeb522c579d7012042ba12518b1bf43a
SHA256 e24c8a80a918fcea7a059873d6cfed50ce38002d4a69e4e733f97e0f123239ae
MD5 853b3c0538e3e7755b3281e067754256
SHA1 7060426ff54355ab145f8b7f6cd94a1d8f365986
SHA512 4b870d777abb5b228ef1e1943a98539fbbff9c58b0c13815f8f32c4297c6bb0087dc45f796d6d6510353cf3e10673f56129a6d85b2c1f1fd301ed3753789d5e2
SSDEEP 3072:sXEJGw99MrLqFjbWAt5iaKnaCGPfBYaRKBj58G8jpu/bBNCanng0Pb:o/PrLDACaTPfBZAf8iNng6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25964

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForDebugEvent LCMapStringW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA SearchPathW VerifyVersionInfoW ExpandEnvironmentStringsW EndUpdateResourceW FindNextFileA FindFirstVolumeW LocalFlags LoadLibraryW GlobalFlags CopyFileA CreateActCtxW lstrlenW UpdateResourceA CreateActCtxA DeleteVolumeMountPointA GetCurrentDirectoryW MoveFileWithProgressA CreateMutexW DeactivateActCtx MoveFileA GetLogicalDriveStringsA ResetEvent InterlockedPushEntrySList CreateMailslotW WriteConsoleInputW QueryDosDeviceA InterlockedDecrement EnumTimeFormatsA SetFileValidData FindFirstFileA FreeEnvironmentStringsA LocalReAlloc GlobalAlloc GetTickCount SetLastError GetPrivateProfileStructA CopyFileExW GetTempPathW ReadConsoleInputA CreateDirectoryExW GetConsoleAliasA InterlockedExchangeAdd LoadLibraryA MultiByteToWideChar GetLastError WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException VirtualAlloc HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA

gdi32

GetCharWidth32A GetCharABCWidthsA SelectObject GetTextFaceW GetBrushOrgEx

winhttp

WinHttpOpen

Sharing