file[.]exe | Triage™

General

Target
file.exe
Size 394KB
Sample230201-bc7t1abb88
SHA256 5393f9c789a72cf5d685cc6e1885ec4e11d6b634d5997a2fc237fbc9fd08003c
MD5 3ca08c1cd5a8424f43fe03e461d2b34f
SHA1 88ae0b0801a64a49a86bfd7a9446ed29677ce606
SHA512 ef8e14fad2130d36346ca69c33911356d4a923b630be2b4cd27f8691dfb59ded00221b8c481ae8819a6e4c5d1f746426d12a78810be9decc20a44f25b38143a2
SSDEEP 6144:H57Lt8v/4TmsY/HjN4FwdatD1x4qEimqMoI88M:Hl54r42+DwpNqMK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 394KB

file.exe

IMPHASH 68213f3d28175c3ae9682456ac8e5857
SHA256 5393f9c789a72cf5d685cc6e1885ec4e11d6b634d5997a2fc237fbc9fd08003c
MD5 3ca08c1cd5a8424f43fe03e461d2b34f
SHA1 88ae0b0801a64a49a86bfd7a9446ed29677ce606
SHA512 ef8e14fad2130d36346ca69c33911356d4a923b630be2b4cd27f8691dfb59ded00221b8c481ae8819a6e4c5d1f746426d12a78810be9decc20a44f25b38143a2
SSDEEP 6144:H57Lt8v/4TmsY/HjN4FwdatD1x4qEimqMoI88M:Hl54r42+DwpNqMK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19514

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetDateFormatW FindResourceExW EndUpdateResourceW GetCurrentProcess SetHandleInformation GetProcessPriorityBoost GetGeoInfoW GetConsoleAliasExesW GlobalAlloc LoadLibraryW WriteConsoleW EnumResourceLanguagesA IsBadStringPtrA LCMapStringA InterlockedExchange GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetTimerQueueTimer LoadLibraryA WriteConsoleA DnsHostnameToComputerNameA QueryDosDeviceW GetCommMask AddAtomA FoldStringA GetModuleHandleA BuildCommDCBA SetCalendarInfoA TerminateJobObject LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW RaiseException

user32

LoadMenuA GetListBoxInfo

winhttp

WinHttpOpen

Sharing