file[.]exe | Triage™

General

Target
file.exe
Size 412KB
Sample230114-fn4zpsea71
SHA256 7d799fcc043e6cc20bc17d65b1eab11e2877da7ea53f0c1952be60eff428848d
MD5 88907ba6ea4cce1b3ea9554d3329140e
SHA1 5eec61fb48c752f6cb222f151a4090a04fe35657
SHA512 2773f4d46c4fc25b29fd86a9e5d923479060a834739a2b1a48b1ca9438c974a768bf80d4f82a23d427959b1f1d6a16aac24fcfdd00ecc3cb958045cf659af418
SSDEEP 6144:gfFTzgzez2ZovPqMepFFbDySZRl33WtKmUs7pgpRjFE:gfFXV22CMoFFDPlHWtKJ0SL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 412KB

file.exe

IMPHASH a89cc745f7b3fef17467a042f8cbe600
SHA256 7d799fcc043e6cc20bc17d65b1eab11e2877da7ea53f0c1952be60eff428848d
MD5 88907ba6ea4cce1b3ea9554d3329140e
SHA1 5eec61fb48c752f6cb222f151a4090a04fe35657
SHA512 2773f4d46c4fc25b29fd86a9e5d923479060a834739a2b1a48b1ca9438c974a768bf80d4f82a23d427959b1f1d6a16aac24fcfdd00ecc3cb958045cf659af418
SSDEEP 6144:gfFTzgzez2ZovPqMepFFbDySZRl33WtKmUs7pgpRjFE:gfFXV22CMoFFDPlHWtKJ0SL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23438

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW VirtualAlloc GetConsoleAliasA SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExA DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathA GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage VerifyVersionInfoA GetHandleInformation EndUpdateResourceA FindNextFileA GetConsoleTitleW LoadLibraryW GlobalFlags GetModuleHandleA CopyFileA lstrlenA UpdateResourceA CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotA WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsA SetFileValidData FindFirstFileW FreeEnvironmentStringsA GetTickCount SetLastError GetLastError CopyFileExA CreateFileA SetStdHandle FillConsoleOutputAttribute GetNumberOfConsoleInputEvents CompareStringA FindFirstVolumeA LoadLibraryA WriteConsoleW GetConsoleOutputCP UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

GetCursorInfo GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing