file[.]exe | Triage™

General

Target
file.exe
Size 361KB
Sample230116-1yb2wseb92
SHA256 3e34fe36ff929921c1ebb88543d6375b64e7fb6bbad755ee4ef7aeaa26901bcc
MD5 ca04dcd5445850c28afd145cb0e84fc8
SHA1 b92800080565823d106c7a85aa570db0026b233f
SHA512 bddaf1718f0c7caf4ab8ccec99867f5f53943d6a4192bb3279500e771b1e871341a8168dd3e0a873092fbb68c3084c9c3e23858e82127cc89afb8a36626319f2
SSDEEP 6144:tcdCVLjsiB7WppwP51akTq9UFg4kg4sDYAj3gW9rCFXDHX:tcMVsiQpO51K4kSot
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 361KB

file.exe

IMPHASH 1fa2b108dd6d3a4f16e2bcfb44d7f4f5
SHA256 3e34fe36ff929921c1ebb88543d6375b64e7fb6bbad755ee4ef7aeaa26901bcc
MD5 ca04dcd5445850c28afd145cb0e84fc8
SHA1 b92800080565823d106c7a85aa570db0026b233f
SHA512 bddaf1718f0c7caf4ab8ccec99867f5f53943d6a4192bb3279500e771b1e871341a8168dd3e0a873092fbb68c3084c9c3e23858e82127cc89afb8a36626319f2
SSDEEP 6144:tcdCVLjsiB7WppwP51akTq9UFg4kg4sDYAj3gW9rCFXDHX:tcMVsiQpO51K4kSot
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22855

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAddAtomA InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetGeoInfoW GetSystemWow64DirectoryA GetPriorityClass WideCharToMultiByte LoadLibraryW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW SetMessageWaitingIndicator GetConsoleFontSize FindResourceExW lstrcmpiA GetProcAddress FindVolumeMountPointClose VirtualAlloc EnterCriticalSection OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA BuildCommDCBA VirtualProtect EnumDateFormatsW EndUpdateResourceA LCMapStringW CreateFileA CloseHandle IsBadStringPtrA HeapCompact WriteConsoleW GetConsoleOutputCP InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA

user32

ClientToScreen ScreenToClient GetDC

advapi32

BackupEventLogW

winhttp

WinHttpSetOption

Sharing