file[.]exe | Triage™

General

Target
file.exe
Size 295KB
Sample230131-2fcfdacf5s
SHA256 d8f32cf50e51417e047eab3582173ef0457e5439df28113bd8afbee290f6087d
MD5 4144520ffece09cf8670b7d8cd8849c8
SHA1 75b7ca39c03d0a944da4090df9c76b4edfbdf707
SHA512 a401d94238cef89a261b4f0ba790bdb1b9e17767553a4a394a5126e32a719b92f23d82adb4a58e906a0970f72d1fe781fb3cd0990d978b7ac5f5d9808044a00b
SSDEEP 3072:5Suah4L45UmLRsLLuyOEfWNiAmlEjOfNZq9uNmqPUx6WfQz86Oiu3MMPgm:/ah4LuU7LSaAiAmlEeNPmqMoI+u8MV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 295KB

file.exe

IMPHASH d84aba910fd98bff40c3867e1dd713e4
SHA256 d8f32cf50e51417e047eab3582173ef0457e5439df28113bd8afbee290f6087d
MD5 4144520ffece09cf8670b7d8cd8849c8
SHA1 75b7ca39c03d0a944da4090df9c76b4edfbdf707
SHA512 a401d94238cef89a261b4f0ba790bdb1b9e17767553a4a394a5126e32a719b92f23d82adb4a58e906a0970f72d1fe781fb3cd0990d978b7ac5f5d9808044a00b
SSDEEP 3072:5Suah4L45UmLRsLLuyOEfWNiAmlEjOfNZq9uNmqPUx6WfQz86Oiu3MMPgm:/ah4LuU7LSaAiAmlEeNPmqMoI+u8MV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17120

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetDateFormatW FindResourceExW GetCurrentProcess SetHandleInformation GetProcessPriorityBoost GetConsoleAliasesA GetGeoInfoW GetConsoleAliasExesW GlobalAlloc LoadLibraryW WriteConsoleW EnumResourceLanguagesA IsBadStringPtrA LCMapStringA InterlockedExchange GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc HeapSize EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize DnsHostnameToComputerNameA QueryDosDeviceW GetCommMask AddAtomA SetCommMask FoldStringW GetModuleHandleA CancelTimerQueueTimer BuildCommDCBA SetCalendarInfoA EndUpdateResourceA TerminateJobObject GetWindowsDirectoryW LCMapStringW GetStringTypeW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement TerminateProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar RaiseException

user32

DdeQueryStringW LoadMenuW GetListBoxInfo

winhttp

WinHttpOpen

Sharing