file[.]exe | Triage™

General

Target
file.exe
Size 232KB
Sample230116-pebfgaaf2x
SHA256 1f81c8da49ef4986b5ebf348fa916ff5c687ac8d0faad34a36b163285755c829
MD5 42819df430e1cbb1f7fb1d2fb9789fb1
SHA1 4f2535a53e36b938a80f0db893ad16a140f4469c
SHA512 eadeb7c123a0a076e91e173931f788ee60f68a2fbf4acdabbd2c0c188f3d81512e5ae8724d2ca060cb74db3f1fa2da9baf68cfaac8a2401cf039a1ced7dcc467
SSDEEP 3072:nXW1loJZLKQwUBuYQD/co9H0ngfUSy5jgai+mmA5gDCeyfDKyQ/uyhOC94c:XW/o7L5/BuYU9H0gJy3iQCLfDHXyUC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 232KB

file.exe

IMPHASH 3c0838e28e2e4e9629cb614625ccd9af
SHA256 1f81c8da49ef4986b5ebf348fa916ff5c687ac8d0faad34a36b163285755c829
MD5 42819df430e1cbb1f7fb1d2fb9789fb1
SHA1 4f2535a53e36b938a80f0db893ad16a140f4469c
SHA512 eadeb7c123a0a076e91e173931f788ee60f68a2fbf4acdabbd2c0c188f3d81512e5ae8724d2ca060cb74db3f1fa2da9baf68cfaac8a2401cf039a1ced7dcc467
SSDEEP 3072:nXW1loJZLKQwUBuYQD/co9H0ngfUSy5jgai+mmA5gDCeyfDKyQ/uyhOC94c:XW/o7L5/BuYU9H0gJy3iQCLfDHXyUC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22849

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAddAtomA EndUpdateResourceW InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap GetGeoInfoW GetSystemWow64DirectoryA GetPriorityClass WideCharToMultiByte LoadLibraryW CreateEventA GetSystemTimeAdjustment SetMessageWaitingIndicator lstrcmpiA FindResourceExW GetProcAddress FindVolumeMountPointClose VirtualAlloc EnterCriticalSection BuildCommDCBW OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW DnsHostnameToComputerNameA GetCommMask SetCommMask EnumDateFormatsA SetConsoleCursorInfo OpenFileMappingW GetConsoleSelectionInfo LCMapStringW CreateFileA CloseHandle IsBadStringPtrW WriteConsoleW GetConsoleOutputCP WriteConsoleA InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle

user32

ScreenToClient ClientToScreen GetDC

advapi32

BackupEventLogW

winhttp

WinHttpSetTimeouts WinHttpReadData

Sharing