file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample230116-3ye5nafe38
SHA256 9e1f021499fd7cea84243b0e3c20d64456b23ab9c3069c1b5bbfccf3b6dc050e
MD5 950215846f0558873e762a6364935866
SHA1 68a0b11fb978331c68e89a63d3e0062f4e0f6e65
SHA512 ffa61b31a6f61fea0f7d51079a27f2de2b9b886d5b888b62bc330e4a31891fb0197bbf8d01bbce7f83e1117f46d02b1a1a26f2be06fea818b8a872c30e897407
SSDEEP 3072:bp5kHlTGL34v9c4p8D1cczidZYw8DnqF1rOLQ/tMisC+45rJeE3qUyvvYCDKyQ/p:FCHsLYckisDvOutMifTynYCDHXG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 1fa2b108dd6d3a4f16e2bcfb44d7f4f5
SHA256 9e1f021499fd7cea84243b0e3c20d64456b23ab9c3069c1b5bbfccf3b6dc050e
MD5 950215846f0558873e762a6364935866
SHA1 68a0b11fb978331c68e89a63d3e0062f4e0f6e65
SHA512 ffa61b31a6f61fea0f7d51079a27f2de2b9b886d5b888b62bc330e4a31891fb0197bbf8d01bbce7f83e1117f46d02b1a1a26f2be06fea818b8a872c30e897407
SSDEEP 3072:bp5kHlTGL34v9c4p8D1cczidZYw8DnqF1rOLQ/tMisC+45rJeE3qUyvvYCDKyQ/p:FCHsLYckisDvOutMifTynYCDHXG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22839

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAddAtomA InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetGeoInfoW GetSystemWow64DirectoryA GetPriorityClass WideCharToMultiByte LoadLibraryW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW SetMessageWaitingIndicator GetConsoleFontSize FindResourceExW lstrcmpiA GetProcAddress FindVolumeMountPointClose VirtualAlloc EnterCriticalSection OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA BuildCommDCBA VirtualProtect EnumDateFormatsW EndUpdateResourceA LCMapStringW CreateFileA CloseHandle IsBadStringPtrA HeapCompact WriteConsoleW GetConsoleOutputCP InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA

user32

ClientToScreen ScreenToClient GetDC

advapi32

BackupEventLogW

winhttp

WinHttpSetOption

Sharing