file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample230114-nrp9qaef97
SHA256 4c7f1d41296aa50b31051bddff7d4fc4f911b04cbc0bc8509a5f41af38952d3e
MD5 a4f308fb3520990e1bd63ebbbbdbb1a1
SHA1 880f641d98dc573905ea0b9e44065c7eda45f312
SHA512 702624cad7627eaad172dec61e0da9b771a758d02d6ed5a9b5fc9fca060f1ce0a0e47630069ad16c875e6077445c537061cc104d03454642bf690b3a8c8f62a2
SSDEEP 3072:oX1jnw5Jj9Nl5gu9XGoABXFmGerHqAW+ZJ7xQMgXapb8pBI8jwWRjoV:8NWj9NIsGjXUGXMJm8pgpRjFE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH a7fc258c47de6b39665c04d408186c7c
SHA256 4c7f1d41296aa50b31051bddff7d4fc4f911b04cbc0bc8509a5f41af38952d3e
MD5 a4f308fb3520990e1bd63ebbbbdbb1a1
SHA1 880f641d98dc573905ea0b9e44065c7eda45f312
SHA512 702624cad7627eaad172dec61e0da9b771a758d02d6ed5a9b5fc9fca060f1ce0a0e47630069ad16c875e6077445c537061cc104d03454642bf690b3a8c8f62a2
SSDEEP 3072:oX1jnw5Jj9Nl5gu9XGoABXFmGerHqAW+ZJ7xQMgXapb8pBI8jwWRjoV:8NWj9NIsGjXUGXMJm8pgpRjFE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23534

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW VirtualAlloc GetConsoleAliasA SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExA DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathA GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage VerifyVersionInfoW GetHandleInformation EndUpdateResourceA FindNextFileA GetConsoleTitleW LoadLibraryW GlobalFlags GetModuleHandleA CopyFileA lstrlenA UpdateResourceW CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotW WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsA SetFileValidData FindFirstFileW FreeEnvironmentStringsW GetTickCount SetLastError GetLastError CopyFileExA CreateFileA SetStdHandle FillConsoleOutputAttribute GetNumberOfConsoleInputEvents CompareStringA FindFirstVolumeA LoadLibraryA WriteConsoleW GetConsoleOutputCP UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

GetCursorInfo GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing