file[.]exe | Triage™

General

Target
file.exe
Size 284KB
Sample230113-shavwsde6s
SHA256 cc02821778a9cd5765f046c8e4f9d7713e3db7c9b7b02e702d7c61204d9343cd
MD5 a91ae68658414f26a3a8da8207b8bfd3
SHA1 6fec09365fa250d8a873951c4ac5766cefdd955f
SHA512 e191696bf0b489a2dfe329713fa387806988582c4c788736229429e4ae877e9ae4a52a3702fed299e2230c9eb19dbde1479e8032194006b512244979fde23fcd
SSDEEP 6144:fmLwzL2I0ON1BCLWbp5L3RJJJSlJZ9tzrSA3:fmLwzKI0GBCLWd5L36Z9P3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 284KB

file.exe

IMPHASH 82082e71df91c1e9e1863143ef102104
SHA256 cc02821778a9cd5765f046c8e4f9d7713e3db7c9b7b02e702d7c61204d9343cd
MD5 a91ae68658414f26a3a8da8207b8bfd3
SHA1 6fec09365fa250d8a873951c4ac5766cefdd955f
SHA512 e191696bf0b489a2dfe329713fa387806988582c4c788736229429e4ae877e9ae4a52a3702fed299e2230c9eb19dbde1479e8032194006b512244979fde23fcd
SSDEEP 6144:fmLwzL2I0ON1BCLWbp5L3RJJJSlJZ9tzrSA3:fmLwzKI0GBCLWd5L36Z9P3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29831

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnregisterWait IsBadStringPtrW FindResourceExW GlobalAddAtomA EndUpdateResourceW InterlockedIncrement GetConsoleAliasA GetCurrentProcess SetComputerNameW FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap ReadConsoleW FindActCtxSectionStringA TlsSetValue SetSystemTimeAdjustment GetSystemWindowsDirectoryA LeaveCriticalSection GetFileAttributesA GetGeoInfoA MultiByteToWideChar FlushInstructionCache GetProcAddress VirtualAlloc LoadLibraryA OpenWaitableTimerW DnsHostnameToComputerNameA GetCommMask SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW GetModuleHandleA BuildCommDCBA GetFileAttributesExW GetTempPathA OpenFileMappingA GetConsoleSelectionInfo LCMapStringW CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP WideCharToMultiByte InterlockedDecrement InterlockedExchange Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA

user32

GetDC

ole32

CoRegisterMallocSpy

winhttp

WinHttpSetDefaultProxyConfiguration

Sharing