file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample230116-wmfhqaeg7x
SHA256 10ea85c992d5bc686475b85c23caa967145eb98e849622629125f69b6e62c19f
MD5 15d7d8d29917f9f1d4ab9d2046e621ca
SHA1 0ff077e011254b64089bd246e7f69cecf6cee76a
SHA512 1951697da0cffc48a3a98d86763eaddf8a37bca06d61333c3fc7d60b47c8a23348a9b16d8c2f6d49902b71d6df4aa5acdc5e56cb4beb158e27cf71547ae73998
SSDEEP 3072:YzNnhucwLHVwY4sMDIc0GYUgfer/KW+OBkfJndJryAk9GSksJ9ODKyQ/uZF:2NhTwL134sHGYUsBdxyAvjLDHX/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH 8af7c45dbdccf09d50ef117176dc57ab
SHA256 10ea85c992d5bc686475b85c23caa967145eb98e849622629125f69b6e62c19f
MD5 15d7d8d29917f9f1d4ab9d2046e621ca
SHA1 0ff077e011254b64089bd246e7f69cecf6cee76a
SHA512 1951697da0cffc48a3a98d86763eaddf8a37bca06d61333c3fc7d60b47c8a23348a9b16d8c2f6d49902b71d6df4aa5acdc5e56cb4beb158e27cf71547ae73998
SSDEEP 3072:YzNnhucwLHVwY4sMDIc0GYUgfer/KW+OBkfJndJryAk9GSksJ9ODKyQ/uZF:2NhTwL134sHGYUsBdxyAvjLDHX/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22833

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAddAtomA InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetGeoInfoW GetSystemWow64DirectoryA GetPriorityClass WideCharToMultiByte LoadLibraryW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW SetMessageWaitingIndicator GetConsoleFontSize FindResourceExW lstrcmpiA GetProcAddress FindVolumeMountPointClose VirtualAlloc EnterCriticalSection BuildCommDCBW OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA EnumDateFormatsW EndUpdateResourceA LCMapStringW CreateFileA CloseHandle IsBadStringPtrA HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle

user32

ScreenToClient ClientToScreen GetDC

advapi32

BackupEventLogW

winhttp

WinHttpSetOption WinHttpReadData

Sharing