file[.]exe | Triage™

General

Target
file.exe
Size 261KB
Sample230114-ej24wahf32
SHA256 b68b7825ae5442d2a20fa8bd2b79753e45ee459f9179c7c492bbf237445260ac
MD5 cb6aaf66f6451189991cee325f40c64c
SHA1 9ad2112772c7926add0bd5b473cd9b5109864625
SHA512 6b6f224a147bddcc5c823dd79199e951d6c9d90f1f547eba0c06cfed9748ea354a146cd5791c66d846357970f1bc898965fd4a34104c21dbd265493d0ed399d3
SSDEEP 3072:AXWiA4L513yoQLaFjO/OprgnSsVzlx6iNapb8pBI8jwWRjoV:0xguQONe0i4pgpRjFE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 261KB

file.exe

IMPHASH a89cc745f7b3fef17467a042f8cbe600
SHA256 b68b7825ae5442d2a20fa8bd2b79753e45ee459f9179c7c492bbf237445260ac
MD5 cb6aaf66f6451189991cee325f40c64c
SHA1 9ad2112772c7926add0bd5b473cd9b5109864625
SHA512 6b6f224a147bddcc5c823dd79199e951d6c9d90f1f547eba0c06cfed9748ea354a146cd5791c66d846357970f1bc898965fd4a34104c21dbd265493d0ed399d3
SSDEEP 3072:AXWiA4L513yoQLaFjO/OprgnSsVzlx6iNapb8pBI8jwWRjoV:0xguQONe0i4pgpRjFE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23454

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW VirtualAlloc GetConsoleAliasA SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExA DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathA GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage VerifyVersionInfoA GetHandleInformation EndUpdateResourceA FindNextFileA GetConsoleTitleW LoadLibraryW GlobalFlags GetModuleHandleA CopyFileA lstrlenA UpdateResourceA CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotA WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsA SetFileValidData FindFirstFileW FreeEnvironmentStringsA GetTickCount SetLastError GetLastError CopyFileExA CreateFileA SetStdHandle FillConsoleOutputAttribute GetNumberOfConsoleInputEvents CompareStringA FindFirstVolumeA LoadLibraryA WriteConsoleW GetConsoleOutputCP UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

GetCursorInfo GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing