file[.]exe | Triage™

General

Target
file.exe
Size 261KB
Sample230114-ha681sbb39
SHA256 ad8ab0c5389d2e8a36e7a113c9da8197891f44d548a829332d5e72ec855f1ba7
MD5 f55e91591d9ce7e33a05dea07e56c178
SHA1 c38570690a8f328523e9ab7525c40d57591a4d88
SHA512 902e6dbf44b88aa3ec9d466722ac18dabdd2b525dfea537f1710cf5873ca1fe2fa5163a65f19d23171794b4c7685b68eb04bb72f13c6c5a8bb762e0c2a06050c
SSDEEP 3072:K/XWSFbzhm85REu+Rv8J1K4K5E4pnOeXTh1xr9Dapb8pBI8jwWRjoV:uXFmRRi4zu4kKapgpRjFE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 261KB

file.exe

IMPHASH a89cc745f7b3fef17467a042f8cbe600
SHA256 ad8ab0c5389d2e8a36e7a113c9da8197891f44d548a829332d5e72ec855f1ba7
MD5 f55e91591d9ce7e33a05dea07e56c178
SHA1 c38570690a8f328523e9ab7525c40d57591a4d88
SHA512 902e6dbf44b88aa3ec9d466722ac18dabdd2b525dfea537f1710cf5873ca1fe2fa5163a65f19d23171794b4c7685b68eb04bb72f13c6c5a8bb762e0c2a06050c
SSDEEP 3072:K/XWSFbzhm85REu+Rv8J1K4K5E4pnOeXTh1xr9Dapb8pBI8jwWRjoV:uXFmRRi4zu4kKapgpRjFE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23438

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW VirtualAlloc GetConsoleAliasA SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExA DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathA GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage VerifyVersionInfoA GetHandleInformation EndUpdateResourceA FindNextFileA GetConsoleTitleW LoadLibraryW GlobalFlags GetModuleHandleA CopyFileA lstrlenA UpdateResourceA CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotA WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsA SetFileValidData FindFirstFileW FreeEnvironmentStringsA GetTickCount SetLastError GetLastError CopyFileExA CreateFileA SetStdHandle FillConsoleOutputAttribute GetNumberOfConsoleInputEvents CompareStringA FindFirstVolumeA LoadLibraryA WriteConsoleW GetConsoleOutputCP UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

GetCursorInfo GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing