file[.]exe | Triage™

General

Target
file.exe
Size 413KB
Sample230113-dhwp2ahe3x
SHA256 98645f77a5800d0afc76aa1d13776dea86ec1da897fa47a638cf27cb2410a003
MD5 fe3bb53eb805f470ba2955b198c79c49
SHA1 6ca5ed625556f2a73e1d4ce1af32da6ad6d51ace
SHA512 8913de474f128f2c66076aab9fb76a265e400c4c8cd645a327c4353320fcfb1cc6857b68c9cc729cc0a0497915cda5a48dd26071e855e17b4df26fe4b88cc020
SSDEEP 6144:7g8pMt0y9jLYjj5rblehIfC7j+8RBWrbxggnuRvmA2BOwUR:7g8pM9K5r0hIq7j+cBWCgOBE2R
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 413KB

file.exe

IMPHASH 5dc8fb5dee12f1532d0ce0467327aa9e
SHA256 98645f77a5800d0afc76aa1d13776dea86ec1da897fa47a638cf27cb2410a003
MD5 fe3bb53eb805f470ba2955b198c79c49
SHA1 6ca5ed625556f2a73e1d4ce1af32da6ad6d51ace
SHA512 8913de474f128f2c66076aab9fb76a265e400c4c8cd645a327c4353320fcfb1cc6857b68c9cc729cc0a0497915cda5a48dd26071e855e17b4df26fe4b88cc020
SSDEEP 6144:7g8pMt0y9jLYjj5rblehIfC7j+8RBWrbxggnuRvmA2BOwUR:7g8pM9K5r0hIq7j+cBWCgOBE2R
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23486

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc GetConsoleAliasA SetComputerNameA GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExA DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathW VerifyVersionInfoA GetHandleInformation EndUpdateResourceA FindNextFileA FindFirstVolumeA CreateFileW GlobalFlags GetModuleHandleA CopyFileA CreateActCtxA lstrlenA UpdateResourceA CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotA WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsW SetFileValidData FindFirstFileW FreeEnvironmentStringsA GetTickCount SetLastError GetPrivateProfileStructW GetLastError CopyFileExA CreateFileA GetConsoleTitleW GetCommProperties GetNumberOfConsoleInputEvents CompareStringA LoadLibraryW LoadLibraryA SetStdHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetTextFaceW GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing