file[.]exe | Triage™

General

Target
file.exe
Size 390KB
Sample230116-hvx6vaba45
SHA256 9a580d08c3433c554c6de0f89a0e6df7086a6ce7e52f6020bcee2ed01f6f5513
MD5 f3eb58d958da66e828cc2468bb4f14fb
SHA1 da58489f4dacac393d63345c36ead2065d3fc178
SHA512 bafef2715c6c5dee903c520991acb98cc6d998bfb0ef8a347e6da15478f4278a3e8a76f576f369d50bc56333d22b342e105d8a33631a9cdcdc55db9b5bbfcfbc
SSDEEP 6144:zUzreLSTSfXBj772V9YQXN3gtFysoWXYWXW//rHS1Eh4lzGZU4zqQna:zUzKeSPBP7S9YQNw5BoWXW//7nhAeFP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 390KB

file.exe

IMPHASH c2992a3f19e353386f6223d505e02441
SHA256 9a580d08c3433c554c6de0f89a0e6df7086a6ce7e52f6020bcee2ed01f6f5513
MD5 f3eb58d958da66e828cc2468bb4f14fb
SHA1 da58489f4dacac393d63345c36ead2065d3fc178
SHA512 bafef2715c6c5dee903c520991acb98cc6d998bfb0ef8a347e6da15478f4278a3e8a76f576f369d50bc56333d22b342e105d8a33631a9cdcdc55db9b5bbfcfbc
SSDEEP 6144:zUzreLSTSfXBj772V9YQXN3gtFysoWXYWXW//rHS1Eh4lzGZU4zqQna:zUzKeSPBP7S9YQNw5BoWXW//7nhAeFP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22628

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAddAtomA EndUpdateResourceW InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap GetGeoInfoW GetSystemWow64DirectoryA GetPriorityClass WideCharToMultiByte LoadLibraryW GetSystemTimeAdjustment SetMessageWaitingIndicator lstrcmpiA FindResourceExW FindVolumeMountPointClose VirtualAlloc EnterCriticalSection BuildCommDCBW OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW DnsHostnameToComputerNameA CreateEventW GetCommMask SetCommMask EnumDateFormatsA SetConsoleCursorInfo GetModuleHandleA OpenFileMappingW GetConsoleSelectionInfo LCMapStringW CreateFileA CloseHandle GetProcAddress IsBadStringPtrW WriteConsoleW GetConsoleOutputCP WriteConsoleA InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle

user32

ScreenToClient ClientToScreen GetDC

advapi32

BackupEventLogW

winhttp

WinHttpSetTimeouts WinHttpReadData

Sharing