file[.]exe | Triage™

General

Target
file.exe
Size 412KB
Sample230113-at2hwaff91
SHA256 085ef74ab0940bdc4e6f4b861208e1fdcb21c9b16ec666c92e54898352b1f49a
MD5 0f605bd0fcb2c299af019678328a6559
SHA1 5681d3b06c930a5081e2e916099e9179c3a7c497
SHA512 d459189549929cf907c05a295c511a7b1af11319701f79bd46c29970dfcbfeb6970e8cdac93f0784fbaaa904c562ed789fb78a9ca02065f4aa476557f99f1534
SSDEEP 6144:jptBlOAwSznp9gK2AWZipEm9TR7HtvBTByADp3wb+xJv2lirJwUR:jptTOAbqRcp19TNBBjDJcOFbrdR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 412KB

file.exe

IMPHASH 5dc8fb5dee12f1532d0ce0467327aa9e
SHA256 085ef74ab0940bdc4e6f4b861208e1fdcb21c9b16ec666c92e54898352b1f49a
MD5 0f605bd0fcb2c299af019678328a6559
SHA1 5681d3b06c930a5081e2e916099e9179c3a7c497
SHA512 d459189549929cf907c05a295c511a7b1af11319701f79bd46c29970dfcbfeb6970e8cdac93f0784fbaaa904c562ed789fb78a9ca02065f4aa476557f99f1534
SSDEEP 6144:jptBlOAwSznp9gK2AWZipEm9TR7HtvBTByADp3wb+xJv2lirJwUR:jptTOAbqRcp19TNBBjDJcOFbrdR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23486

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc GetConsoleAliasA SetComputerNameA GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExA DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathW VerifyVersionInfoA GetHandleInformation EndUpdateResourceA FindNextFileA FindFirstVolumeA CreateFileW GlobalFlags GetModuleHandleA CopyFileA CreateActCtxA lstrlenA UpdateResourceA CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotA WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsW SetFileValidData FindFirstFileW FreeEnvironmentStringsA GetTickCount SetLastError GetPrivateProfileStructW GetLastError CopyFileExA CreateFileA GetConsoleTitleW GetCommProperties GetNumberOfConsoleInputEvents CompareStringA LoadLibraryW LoadLibraryA SetStdHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetTextFaceW GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing