file[.]exe | Triage™

General

Target
file.exe
Size 232KB
Sample230116-tkm4nsde41
SHA256 628b6ee9e18e496c863bbfee2e7ade9e3a2801b58cc68cf93dd5deb2d87b1ac2
MD5 3a96515e3c96a4905e818c77632bbb5f
SHA1 df96e193ab67881de860b1b0f9c4ef0df3f6bd55
SHA512 d934d4bf9de9bce88d38983b2bbcfb2f7ec3332d2247a4f9b45f33d81fc8f0aedf580d15a4606e955e2d45714be6de21868e722a95d2ac5cf814b7cbf8f7e805
SSDEEP 6144:apT/8L+WhBt6yhhqb6tqPQsVofCkQ4DHXyUCw:apT/8KCBlHqHosofCnei
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 232KB

file.exe

IMPHASH dcbabea1f115b8d3cffc6cd96d3f9a43
SHA256 628b6ee9e18e496c863bbfee2e7ade9e3a2801b58cc68cf93dd5deb2d87b1ac2
MD5 3a96515e3c96a4905e818c77632bbb5f
SHA1 df96e193ab67881de860b1b0f9c4ef0df3f6bd55
SHA512 d934d4bf9de9bce88d38983b2bbcfb2f7ec3332d2247a4f9b45f33d81fc8f0aedf580d15a4606e955e2d45714be6de21868e722a95d2ac5cf814b7cbf8f7e805
SSDEEP 6144:apT/8L+WhBt6yhhqb6tqPQsVofCkQ4DHXyUCw:apT/8KCBlHqHosofCnei
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22833

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA FreeEnvironmentStringsA EnumCalendarInfoExW GetProcessHeap GetGeoInfoW GetSystemWow64DirectoryA GetPriorityClass WideCharToMultiByte LoadLibraryW CreateEventA GetSystemTimeAdjustment DnsHostnameToComputerNameW SetMessageWaitingIndicator GetConsoleFontSize GlobalAddAtomA lstrcmpiA GetProcAddress FindVolumeMountPointClose VirtualAlloc EnterCriticalSection BuildCommDCBW OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA EnumDateFormatsW EndUpdateResourceA LCMapStringW CreateFileA CloseHandle IsBadStringPtrA FindResourceExW WriteConsoleW GetConsoleOutputCP WriteConsoleA InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle

user32

ScreenToClient ClientToScreen GetDC

advapi32

BackupEventLogW

winhttp

WinHttpSetTimeouts WinHttpReadData

Sharing