file[.]exe | Triage™

General

Target
file.exe
Size 296KB
Sample230131-yh4e4abh41
SHA256 9e7f9353ce20ec8542a401c7e87b3da83eec6c2c7de2bddf06125b2d7755ac22
MD5 959f089583804485ac51c620ab73ede7
SHA1 5589b592d85a6f67bdcd0ff7c9fb34d8963e0f51
SHA512 fb60b52f7f317535aebf2f6e79e730dc20c634c7f9d688c67e160c1e4a912cf196bf7875e5fe76b836836d2d84741a0bdf08ac2230e3f98d663b88bcf44a3119
SSDEEP 6144:hZNqrLebzcNPhcSQOvL0/HTiLH2mqMoIEL8M:jNyyPcNJZ9geD5qMeL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 296KB

file.exe

IMPHASH 9c039baca0968dd2f90042d865dd6c2b
SHA256 9e7f9353ce20ec8542a401c7e87b3da83eec6c2c7de2bddf06125b2d7755ac22
MD5 959f089583804485ac51c620ab73ede7
SHA1 5589b592d85a6f67bdcd0ff7c9fb34d8963e0f51
SHA512 fb60b52f7f317535aebf2f6e79e730dc20c634c7f9d688c67e160c1e4a912cf196bf7875e5fe76b836836d2d84741a0bdf08ac2230e3f98d663b88bcf44a3119
SSDEEP 6144:hZNqrLebzcNPhcSQOvL0/HTiLH2mqMoIEL8M:jNyyPcNJZ9geD5qMeL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17392

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA FindResourceExW InterlockedIncrement GetCurrentProcess SetHandleInformation GetProcessPriorityBoost GetConsoleAliasesA GetGeoInfoW GetConsoleAliasExesW GetDateFormatA GlobalAlloc LoadLibraryW WriteConsoleW IsBadStringPtrA LCMapStringA GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc HeapSize EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize DnsHostnameToComputerNameA AddAtomW GetCommMask SetCommMask FoldStringW GetModuleHandleA CancelTimerQueueTimer BuildCommDCBA SetCalendarInfoA EndUpdateResourceA TerminateJobObject GetWindowsDirectoryW EnumResourceLanguagesW LCMapStringW GetStringTypeW MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement TerminateProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetStringTypeA RaiseException

user32

DdeQueryStringW LoadMenuW GetListBoxInfo

winhttp

WinHttpOpen

Sharing