file[.]exe | Triage™

General

Target
file.exe
Size 261KB
Sample230113-e64k8aaa2v
SHA256 fb82e04c70d64efd7544b5fa826e1efdd90c75ea396adac9c9562325997f3ad7
MD5 c657cb8392291d68365116184a7021ce
SHA1 2700ce054f3d4f925bb04627c0420dba4921b3ed
SHA512 5ca301db3f3c64ca9271a20297f7ba82e1ad161d5268002bba979ef8e06898e9da81023ce32634092ecd86ab757f3fe68a2aef2b17ced6794e0235374815968c
SSDEEP 3072:IXJnPIEjsW5C+dyAQZnoseGWoYyJ/Ci2IEIFSI23KKGgMe5LRFYUEA7:cSEYricY6AvYd2rwUR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 261KB

file.exe

IMPHASH 5dc8fb5dee12f1532d0ce0467327aa9e
SHA256 fb82e04c70d64efd7544b5fa826e1efdd90c75ea396adac9c9562325997f3ad7
MD5 c657cb8392291d68365116184a7021ce
SHA1 2700ce054f3d4f925bb04627c0420dba4921b3ed
SHA512 5ca301db3f3c64ca9271a20297f7ba82e1ad161d5268002bba979ef8e06898e9da81023ce32634092ecd86ab757f3fe68a2aef2b17ced6794e0235374815968c
SSDEEP 3072:IXJnPIEjsW5C+dyAQZnoseGWoYyJ/Ci2IEIFSI23KKGgMe5LRFYUEA7:cSEYricY6AvYd2rwUR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23486

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc GetConsoleAliasA SetComputerNameA GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExA DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathW VerifyVersionInfoA GetHandleInformation EndUpdateResourceA FindNextFileA FindFirstVolumeA CreateFileW GlobalFlags GetModuleHandleA CopyFileA CreateActCtxA lstrlenA UpdateResourceA CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotA WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsW SetFileValidData FindFirstFileW FreeEnvironmentStringsA GetTickCount SetLastError GetPrivateProfileStructW GetLastError CopyFileExA CreateFileA GetConsoleTitleW GetCommProperties GetNumberOfConsoleInputEvents CompareStringA LoadLibraryW LoadLibraryA SetStdHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetTextFaceW GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing