file[.]exe | Triage™

General

Target
file.exe
Size 245KB
Sample220828-1tw69sgce6
SHA256 17057d67afff5ff9bfc15ab93f6d5e1c2052c35eb8532117795b491e4e8957f9
MD5 1b799bb6674daa545d78d587dc6cd1ab
SHA1 22e7c7ff4f6696abb7e6838b65f7da2e6fc9368b
SHA512 b023e49ec968e368865fe3d6d6cb27efc209dd834e2e521741cd85e113e149fa656c2f9fe6ec7b7719fe82800dc6cf858f5f4002d68a2920536659b7b52c7e37
SSDEEP 3072:CrwNVoBgC43whHmgbVmJuta5/t8/UnOxZQE1cfxctZIRetRgZ8prEjWU1Z:y67C43whlOV8ssZQEmfwIYMZYrUWI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 245KB

file.exe

IMPHASH 2a3abe3f2c2c4342ffe3930eed2d0e9b
SHA256 17057d67afff5ff9bfc15ab93f6d5e1c2052c35eb8532117795b491e4e8957f9
MD5 1b799bb6674daa545d78d587dc6cd1ab
SHA1 22e7c7ff4f6696abb7e6838b65f7da2e6fc9368b
SHA512 b023e49ec968e368865fe3d6d6cb27efc209dd834e2e521741cd85e113e149fa656c2f9fe6ec7b7719fe82800dc6cf858f5f4002d68a2920536659b7b52c7e37
SSDEEP 3072:CrwNVoBgC43whHmgbVmJuta5/t8/UnOxZQE1cfxctZIRetRgZ8prEjWU1Z:y67C43whlOV8ssZQEmfwIYMZYrUWI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15251

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringW SetWaitableTimer WaitNamedPipeA CommConfigDialogW SetSystemTimeAdjustment SearchPathA EnumResourceTypesA GetCPInfoExA EnumResourceTypesW GetModuleFileNameA WriteConsoleOutputCharacterW GetConsoleAliasesLengthA DeleteFileA LocalAlloc GetProcAddress GetModuleHandleW LoadLibraryW AddRefActCtx GetConsoleAliasW FindFirstChangeNotificationA GlobalAddAtomA WritePrivateProfileStringW EnumResourceNamesA lstrcpynA AddAtomA GetConsoleAliasesLengthW FreeConsole SetPriorityClass _lclose SetCommMask GetConsoleTitleW CreateDirectoryExA FillConsoleOutputCharacterW GetCommandLineA HeapSetInformation GetStartupInfoW SetUnhandledExceptionFilter ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection EnterCriticalSection HeapFree Sleep RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapSize HeapAlloc HeapReAlloc IsProcessorFeaturePresent

advapi32

BackupEventLogW CloseEventLog DeregisterEventSource GetNumberOfEventLogRecords GetEventLogInformation

Sharing