file[.]exe | Triage™

General

Target
file.exe
Size 258KB
Sample230116-h535vabc69
SHA256 33cbddcf924c68e5bd246592b7e70e7ed901b8fbdb731b243c21ae22d8d0aa57
MD5 3499daae13dfeae0cecacb53dc3a8e45
SHA1 da20c348c01a048d3a0774dc5d7d2bc92de74926
SHA512 49dca724ac401d5471acfb0f372cb895e81471edddd4aa2de56a0326119d4b17a51ee8506fe98e59c5047f075dd3c9f57f4cf4fab3d6a1d38443aedde4e3bf04
SSDEEP 3072:ztCANP9dFrLYpdw5vKODvcEGcnoqCXs0XkWeZ3rqnXsdUAZf7q/1iEcaVkQU:xCeP9XLYLWvKWGcno4GkWqVdU4zqQna
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 258KB

file.exe

IMPHASH c2992a3f19e353386f6223d505e02441
SHA256 33cbddcf924c68e5bd246592b7e70e7ed901b8fbdb731b243c21ae22d8d0aa57
MD5 3499daae13dfeae0cecacb53dc3a8e45
SHA1 da20c348c01a048d3a0774dc5d7d2bc92de74926
SHA512 49dca724ac401d5471acfb0f372cb895e81471edddd4aa2de56a0326119d4b17a51ee8506fe98e59c5047f075dd3c9f57f4cf4fab3d6a1d38443aedde4e3bf04
SSDEEP 3072:ztCANP9dFrLYpdw5vKODvcEGcnoqCXs0XkWeZ3rqnXsdUAZf7q/1iEcaVkQU:xCeP9XLYLWvKWGcno4GkWqVdU4zqQna
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22628

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAddAtomA EndUpdateResourceW InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap GetGeoInfoW GetSystemWow64DirectoryA GetPriorityClass WideCharToMultiByte LoadLibraryW GetSystemTimeAdjustment SetMessageWaitingIndicator lstrcmpiA FindResourceExW FindVolumeMountPointClose VirtualAlloc EnterCriticalSection BuildCommDCBW OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW DnsHostnameToComputerNameA CreateEventW GetCommMask SetCommMask EnumDateFormatsA SetConsoleCursorInfo GetModuleHandleA OpenFileMappingW GetConsoleSelectionInfo LCMapStringW CreateFileA CloseHandle GetProcAddress IsBadStringPtrW WriteConsoleW GetConsoleOutputCP WriteConsoleA InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle

user32

ScreenToClient ClientToScreen GetDC

advapi32

BackupEventLogW

winhttp

WinHttpSetTimeouts WinHttpReadData

Sharing