file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample230116-v3pwnaae32
SHA256 ef0d02404a74d0e990f7ec624d207348c697fdeb0f9fcf98e37cbfbecf2918b0
MD5 154aa5bac486f61553b3f1e4af824917
SHA1 41fcad6a24f3e2152fbd0072ce032ba8bf97ccec
SHA512 681f137af9adacf51cdc8f2be2667aa36c1e36b3cb318a763170a14a6754b78493f14a8fb57b8f93975cb68bf7ba99749622f07642f16a7395ac3b2d089e19fc
SSDEEP 3072:CzyZhN/OkH4LN0VwgBLzDIc0b00xhe8loX6Qtb837+iOjMwYuookJ/19eyDKyQ/W:Yy3NN4LNaLBLUDZv37ojM7skJdPDHX/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH 8af7c45dbdccf09d50ef117176dc57ab
SHA256 ef0d02404a74d0e990f7ec624d207348c697fdeb0f9fcf98e37cbfbecf2918b0
MD5 154aa5bac486f61553b3f1e4af824917
SHA1 41fcad6a24f3e2152fbd0072ce032ba8bf97ccec
SHA512 681f137af9adacf51cdc8f2be2667aa36c1e36b3cb318a763170a14a6754b78493f14a8fb57b8f93975cb68bf7ba99749622f07642f16a7395ac3b2d089e19fc
SSDEEP 3072:CzyZhN/OkH4LN0VwgBLzDIc0b00xhe8loX6Qtb837+iOjMwYuookJ/19eyDKyQ/W:Yy3NN4LNaLBLUDZv37ojM7skJdPDHX/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22833

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAddAtomA InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetGeoInfoW GetSystemWow64DirectoryA GetPriorityClass WideCharToMultiByte LoadLibraryW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW SetMessageWaitingIndicator GetConsoleFontSize FindResourceExW lstrcmpiA GetProcAddress FindVolumeMountPointClose VirtualAlloc EnterCriticalSection BuildCommDCBW OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA EnumDateFormatsW EndUpdateResourceA LCMapStringW CreateFileA CloseHandle IsBadStringPtrA HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle

user32

ScreenToClient ClientToScreen GetDC

advapi32

BackupEventLogW

winhttp

WinHttpSetOption WinHttpReadData

Sharing