file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample230116-vs5jcsac86
SHA256 7568ea761019a6f06ee528cf1cf53fe33beb34c04503750c369d9682a9e6fcbe
MD5 86d3dd423e8f309cb78ac10282e37553
SHA1 8d9748953046fe363cd930130ad8a898daf486ab
SHA512 ad5abc5b7c7233bf2fb506f87df10af7abb13d8bd6b31c17b75c4de041856444c04ee2f21fe0276ba08bcc73541452496b727ab66f5e8b327f2906abfeb9444e
SSDEEP 6144:BOzSyuLJXYdEG6qpY7FfS1Ffq5kdDHXI:BOzFu9od76uY79qfq5k9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH 8af7c45dbdccf09d50ef117176dc57ab
SHA256 7568ea761019a6f06ee528cf1cf53fe33beb34c04503750c369d9682a9e6fcbe
MD5 86d3dd423e8f309cb78ac10282e37553
SHA1 8d9748953046fe363cd930130ad8a898daf486ab
SHA512 ad5abc5b7c7233bf2fb506f87df10af7abb13d8bd6b31c17b75c4de041856444c04ee2f21fe0276ba08bcc73541452496b727ab66f5e8b327f2906abfeb9444e
SSDEEP 6144:BOzSyuLJXYdEG6qpY7FfS1Ffq5kdDHXI:BOzFu9od76uY79qfq5k9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22833

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAddAtomA InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetGeoInfoW GetSystemWow64DirectoryA GetPriorityClass WideCharToMultiByte LoadLibraryW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW SetMessageWaitingIndicator GetConsoleFontSize FindResourceExW lstrcmpiA GetProcAddress FindVolumeMountPointClose VirtualAlloc EnterCriticalSection BuildCommDCBW OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA EnumDateFormatsW EndUpdateResourceA LCMapStringW CreateFileA CloseHandle IsBadStringPtrA HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle

user32

ScreenToClient ClientToScreen GetDC

advapi32

BackupEventLogW

winhttp

WinHttpSetOption WinHttpReadData

Sharing