file[.]exe | Triage™

General

Target
file.exe
Size 412KB
Sample230114-kg2yzsda56
SHA256 735ab4afb473c98b01494897b99c6cf1a618252b30af97bffb19b1bb00f890b6
MD5 cf10ef4da16866fb2ea2b5f0a5a0a8f3
SHA1 2a865e56e60de50e1e7c285f0f5b2587c00594c5
SHA512 9bfe2106582f1f7997dd2990b0f50042726c83c194a08094d61c5c93714773b61868b786aa606d42c2e6f95c4898b094be8956f32fdca2d6ca90ab637e8071b9
SSDEEP 6144:hWbyUphMigtI2mDj+K/AldlWgQn95si4CDK9y8VH6r0dJXpgpRjFE:hWbRppg62mWK/IOtjx40y3h6rkXSL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 412KB

file.exe

IMPHASH a89cc745f7b3fef17467a042f8cbe600
SHA256 735ab4afb473c98b01494897b99c6cf1a618252b30af97bffb19b1bb00f890b6
MD5 cf10ef4da16866fb2ea2b5f0a5a0a8f3
SHA1 2a865e56e60de50e1e7c285f0f5b2587c00594c5
SHA512 9bfe2106582f1f7997dd2990b0f50042726c83c194a08094d61c5c93714773b61868b786aa606d42c2e6f95c4898b094be8956f32fdca2d6ca90ab637e8071b9
SSDEEP 6144:hWbyUphMigtI2mDj+K/AldlWgQn95si4CDK9y8VH6r0dJXpgpRjFE:hWbRppg62mWK/IOtjx40y3h6rkXSL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23438

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW VirtualAlloc GetConsoleAliasA SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExA DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathA GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage VerifyVersionInfoA GetHandleInformation EndUpdateResourceA FindNextFileA GetConsoleTitleW LoadLibraryW GlobalFlags GetModuleHandleA CopyFileA lstrlenA UpdateResourceA CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotA WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsA SetFileValidData FindFirstFileW FreeEnvironmentStringsA GetTickCount SetLastError GetLastError CopyFileExA CreateFileA SetStdHandle FillConsoleOutputAttribute GetNumberOfConsoleInputEvents CompareStringA FindFirstVolumeA LoadLibraryA WriteConsoleW GetConsoleOutputCP UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

GetCursorInfo GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing