file[.]exe | Triage™

General

Target
file.exe
Size 267KB
Sample230112-psxkvsbg2s
SHA256 62e688affe6cd2be94a92bde648cf5bd58a1903ccd88327bd6752813b4fcaa0a
MD5 c636584016ec1b59b48553aa8560fd4c
SHA1 e5488b539c7016cdc779dbdad240d1e0860c774c
SHA512 d35af176615dbceed2d5cfb368ab482f7049987401c22103dbca44737b1a2870f4b002cfef1562e439d6b5416399fae493eccd366039d14c934ff7e5b085c3f1
SSDEEP 3072:iPXENwFxQpLW2zIq35CMidp35pZJbqovb6YTsU/CMhbMs3xEZB1Px76b5qWbyajt:4xiLiqcMidpppXeovb6YTAMOsS5gq+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 267KB

file.exe

IMPHASH 6debacaaafe842430a87abfc0fab4865
SHA256 62e688affe6cd2be94a92bde648cf5bd58a1903ccd88327bd6752813b4fcaa0a
MD5 c636584016ec1b59b48553aa8560fd4c
SHA1 e5488b539c7016cdc779dbdad240d1e0860c774c
SHA512 d35af176615dbceed2d5cfb368ab482f7049987401c22103dbca44737b1a2870f4b002cfef1562e439d6b5416399fae493eccd366039d14c934ff7e5b085c3f1
SSDEEP 3072:iPXENwFxQpLW2zIq35CMidp35pZJbqovb6YTsU/CMhbMs3xEZB1Px76b5qWbyajt:4xiLiqcMidpppXeovb6YTAMOsS5gq+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25596

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect GetConsoleAliasA SetComputerNameA GetSystemWindowsDirectoryW GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExW DeleteAtom GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetCurrentDirectoryW WaitForDebugEvent LCMapStringW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA SearchPathW VerifyVersionInfoW GetHandleInformation EndUpdateResourceW FindNextFileA CreateFileW LoadLibraryW GlobalFlags CopyFileA CreateActCtxW lstrlenA UpdateResourceA CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotA WriteConsoleInputW InterlockedExchangeAdd EnumTimeFormatsA SetFileValidData FindFirstFileW FreeEnvironmentStringsA GlobalAlloc GetTickCount SetLastError GetPrivateProfileStructA CopyFileExW CreateFileA GetConsoleTitleW GetCommMask GetNumberOfConsoleInputEvents CompareStringA FindFirstVolumeA LoadLibraryA HeapSize WriteConsoleW MultiByteToWideChar GetLastError WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException VirtualAlloc HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP

user32

GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetTextFaceW GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing