file[.]exe | Triage™

General

Target
file.exe
Size 299KB
Sample230201-bt375sbc77
SHA256 4587a2ae3c826cf7fc539f52987ba8f7356068e41888fde9d07e2d5cf8f39314
MD5 ba61f8ddaf103fb2786f0531e7032d53
SHA1 9ceb2377137eae0354371bbd2823c75b67fa24cb
SHA512 fc6c8c91ad4013c4e63f75ccaea7822d392101398cf2d35953e131f44d96f7e8673b202147cd4735f45ff6b8b83dabad9ed571370d9119aa89956c5df2982a27
SSDEEP 3072:AgB+ew+LLKsRcw73CV3LQprGSyGdXHhqUDi61OUxVQSdgSmqPUx6WfQz86cZWfb9:2ew+LLuwbCmpxVXpbgSmqMoI9ZYb8M
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 299KB

file.exe

IMPHASH 68213f3d28175c3ae9682456ac8e5857
SHA256 4587a2ae3c826cf7fc539f52987ba8f7356068e41888fde9d07e2d5cf8f39314
MD5 ba61f8ddaf103fb2786f0531e7032d53
SHA1 9ceb2377137eae0354371bbd2823c75b67fa24cb
SHA512 fc6c8c91ad4013c4e63f75ccaea7822d392101398cf2d35953e131f44d96f7e8673b202147cd4735f45ff6b8b83dabad9ed571370d9119aa89956c5df2982a27
SSDEEP 3072:AgB+ew+LLKsRcw73CV3LQprGSyGdXHhqUDi61OUxVQSdgSmqPUx6WfQz86cZWfb9:2ew+LLuwbCmpxVXpbgSmqMoI9ZYb8M
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19498

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetDateFormatW FindResourceExW EndUpdateResourceW GetCurrentProcess SetHandleInformation GetProcessPriorityBoost GetGeoInfoW GetConsoleAliasExesW GlobalAlloc LoadLibraryW WriteConsoleW EnumResourceLanguagesA IsBadStringPtrA LCMapStringA InterlockedExchange GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetTimerQueueTimer LoadLibraryA WriteConsoleA DnsHostnameToComputerNameA QueryDosDeviceW GetCommMask AddAtomA FoldStringA GetModuleHandleA BuildCommDCBA SetCalendarInfoA TerminateJobObject LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW RaiseException

user32

LoadMenuA GetListBoxInfo

winhttp

WinHttpOpen

Sharing