file[.]exe | Triage™

General

Target
file.exe
Size 412KB
Sample230114-dk6ysada3x
SHA256 0f621f5d51401fc2cc15d9a38767718c761c2ea7f44fd12e4054f0b85bcdca59
MD5 50205272b044d2b98a25d1eddbc4d3eb
SHA1 599c19fa97f73e701d35a160732bd207de00420f
SHA512 433a8b691b9d16b000a5ad9b403a2786de765750a8997e56c17949e709de50696ca9c0f6326994d9d03bae6ea13794d98136fc4e8d075a05cb3f45f6fa9a566a
SSDEEP 6144:4Ou0TJO5z+7qZrNAfEIETIZR1OGIluKTwNu8AyCHpgpRjFE:4ON4nfAfhEUR3IlTwNu8AyGSL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 412KB

file.exe

IMPHASH a89cc745f7b3fef17467a042f8cbe600
SHA256 0f621f5d51401fc2cc15d9a38767718c761c2ea7f44fd12e4054f0b85bcdca59
MD5 50205272b044d2b98a25d1eddbc4d3eb
SHA1 599c19fa97f73e701d35a160732bd207de00420f
SHA512 433a8b691b9d16b000a5ad9b403a2786de765750a8997e56c17949e709de50696ca9c0f6326994d9d03bae6ea13794d98136fc4e8d075a05cb3f45f6fa9a566a
SSDEEP 6144:4Ou0TJO5z+7qZrNAfEIETIZR1OGIluKTwNu8AyCHpgpRjFE:4ON4nfAfhEUR3IlTwNu8AyGSL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23454

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW VirtualAlloc GetConsoleAliasA SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExA DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathA GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage VerifyVersionInfoA GetHandleInformation EndUpdateResourceA FindNextFileA GetConsoleTitleW LoadLibraryW GlobalFlags GetModuleHandleA CopyFileA lstrlenA UpdateResourceA CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotA WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsA SetFileValidData FindFirstFileW FreeEnvironmentStringsA GetTickCount SetLastError GetLastError CopyFileExA CreateFileA SetStdHandle FillConsoleOutputAttribute GetNumberOfConsoleInputEvents CompareStringA FindFirstVolumeA LoadLibraryA WriteConsoleW GetConsoleOutputCP UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

GetCursorInfo GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing