file[.]exe | Triage™

General

Target
file.exe
Size 394KB
Sample230201-e5dy6sdg5s
SHA256 36f501220133a7fc4a107c321f5a521b63147e71ccf65bead8a397bc6bd84d4e
MD5 8586e0bb849bd1ac13d99322001c5b6d
SHA1 7602d41ec6d6310f523636f08b7471a63c0405e7
SHA512 c697e112a8f5254656aaf1c77376619e4ec2ff501aebbc5919dd6853a553943aba58d1f007f8dd0ce3c0d9042adfd549636f82337ff37aec90e384b517c1d84b
SSDEEP 6144:m3lLfqtFeUXitZLUSbp0aCLTq5483SAHTGufT00vmqMoIXL8M:m1bApXitFzy53qXiWTl9OqMp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 394KB

file.exe

IMPHASH 68213f3d28175c3ae9682456ac8e5857
SHA256 36f501220133a7fc4a107c321f5a521b63147e71ccf65bead8a397bc6bd84d4e
MD5 8586e0bb849bd1ac13d99322001c5b6d
SHA1 7602d41ec6d6310f523636f08b7471a63c0405e7
SHA512 c697e112a8f5254656aaf1c77376619e4ec2ff501aebbc5919dd6853a553943aba58d1f007f8dd0ce3c0d9042adfd549636f82337ff37aec90e384b517c1d84b
SSDEEP 6144:m3lLfqtFeUXitZLUSbp0aCLTq5483SAHTGufT00vmqMoIXL8M:m1bApXitFzy53qXiWTl9OqMp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19514

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetDateFormatW FindResourceExW EndUpdateResourceW GetCurrentProcess SetHandleInformation GetProcessPriorityBoost GetGeoInfoW GetConsoleAliasExesW GlobalAlloc LoadLibraryW WriteConsoleW EnumResourceLanguagesA IsBadStringPtrA LCMapStringA InterlockedExchange GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetTimerQueueTimer LoadLibraryA WriteConsoleA DnsHostnameToComputerNameA QueryDosDeviceW GetCommMask AddAtomA FoldStringA GetModuleHandleA BuildCommDCBA SetCalendarInfoA TerminateJobObject LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW RaiseException

user32

LoadMenuA GetListBoxInfo

winhttp

WinHttpOpen

Sharing