file[.]exe | Triage™

General

Target
file.exe
Size 155KB
Sample220829-emxzbsbbbr
SHA256 b1085b633acf81d46d79ce289a74fa70043e82833008aff7e1968f3b5e93c670
MD5 39ca7010fbee49f2ce4f371669b967b3
SHA1 0e793615727e3cc1dc79b5322216a1d49a9f7b52
SHA512 175a11d6fec6f293dad94653d5e41c596106d4ae4c65d7d11bec793e1796f366ea2d5f8d7fe76e1d5d57b69a901ba980ed1f51aba6c5030079cdba952e4e019c
SSDEEP 3072:0UwNVMH4mD0pgurB/n487O8U/2CoMUaRycX3iD0siG:v6MH4mDk/4uOv2CvPRyaMliG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 155KB

file.exe

IMPHASH 2a3abe3f2c2c4342ffe3930eed2d0e9b
SHA256 b1085b633acf81d46d79ce289a74fa70043e82833008aff7e1968f3b5e93c670
MD5 39ca7010fbee49f2ce4f371669b967b3
SHA1 0e793615727e3cc1dc79b5322216a1d49a9f7b52
SHA512 175a11d6fec6f293dad94653d5e41c596106d4ae4c65d7d11bec793e1796f366ea2d5f8d7fe76e1d5d57b69a901ba980ed1f51aba6c5030079cdba952e4e019c
SSDEEP 3072:0UwNVMH4mD0pgurB/n487O8U/2CoMUaRycX3iD0siG:v6MH4mDk/4uOv2CvPRyaMliG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15251

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringW SetWaitableTimer WaitNamedPipeA CommConfigDialogW SetSystemTimeAdjustment SearchPathA EnumResourceTypesA GetCPInfoExA EnumResourceTypesW GetModuleFileNameA WriteConsoleOutputCharacterW GetConsoleAliasesLengthA DeleteFileA LocalAlloc GetProcAddress GetModuleHandleW LoadLibraryW AddRefActCtx GetConsoleAliasW FindFirstChangeNotificationA GlobalAddAtomA WritePrivateProfileStringW EnumResourceNamesA lstrcpynA AddAtomA GetConsoleAliasesLengthW FreeConsole SetPriorityClass _lclose SetCommMask GetConsoleTitleW CreateDirectoryExA FillConsoleOutputCharacterW GetCommandLineA HeapSetInformation GetStartupInfoW SetUnhandledExceptionFilter ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection EnterCriticalSection HeapFree Sleep RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapSize HeapAlloc HeapReAlloc IsProcessorFeaturePresent

advapi32

BackupEventLogW CloseEventLog DeregisterEventSource GetNumberOfEventLogRecords GetEventLogInformation

Sharing