file[.]exe | Triage™

General

Target
file.exe
Size 282KB
Sample220902-wqv3ksabcl
SHA256 c5a960f514bdb54fb064a12f4c77e8fcc42bcb3fc1f0ef50f6c723faa173bf0c
MD5 a0cc3de6d4f5d53294523e03bf25a44f
SHA1 816fbba5681b2d039859bd20c556f7ecada5e3c4
SHA512 d599102f23e2905979cd0cc4d3aac5a6c29a9360c98c7a9d4a93b6638c8602ffc12032340b22b6cbb28e6f83d61f31e25cf1ec8fd145c275b4cffeb5f8e4534a
SSDEEP 6144:nAS1sUWXDGSU0SHwy+0lETWamuRbaJK8pjF4F:11IX6p7Hwy+0lE5muH8py
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 282KB

file.exe

IMPHASH 4298384b621dfb814ebdeb15309fd6af
SHA256 c5a960f514bdb54fb064a12f4c77e8fcc42bcb3fc1f0ef50f6c723faa173bf0c
MD5 a0cc3de6d4f5d53294523e03bf25a44f
SHA1 816fbba5681b2d039859bd20c556f7ecada5e3c4
SHA512 d599102f23e2905979cd0cc4d3aac5a6c29a9360c98c7a9d4a93b6638c8602ffc12032340b22b6cbb28e6f83d61f31e25cf1ec8fd145c275b4cffeb5f8e4534a
SSDEEP 6144:nAS1sUWXDGSU0SHwy+0lETWamuRbaJK8pjF4F:11IX6p7Hwy+0lE5muH8py
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39712

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetHandleCount GetProfileSectionA VerifyVersionInfoW QueryDosDeviceA LocalFree GetProcessPriorityBoost VirtualQuery GlobalGetAtomNameW FindResourceA GetComputerNameExA GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress VirtualProtect _lwrite LockFile GetPrivateProfileStructA GetDiskFreeSpaceExW DefineDosDeviceA SetVolumeMountPointW GetAtomNameW SetConsoleScreenBufferSize TerminateProcess EnumResourceLanguagesA GetCPInfoExW GetThreadContext lstrlenW GetProcessAffinityMask SetConsoleCtrlHandler IsProcessInJob CopyFileW lstrcpynA WriteConsoleW GetCommandLineA GetLastError GetCommandLineW InterlockedIncrement SearchPathA FormatMessageW CreateJobObjectA InitializeCriticalSection FindNextVolumeA GetConsoleCursorInfo MoveFileWithProgressW LoadLibraryW GetConsoleAliasW WriteProfileSectionW AddAtomW InterlockedDecrement LoadLibraryA GetProfileSectionW GetDefaultCommConfigA GetConsoleAliasesLengthW FoldStringW lstrcpyA TerminateThread HeapFree SetCriticalSectionSpinCount GetComputerNameW EnumSystemLocalesW DisableThreadLibraryCalls OpenMutexA LocalFileTimeToFileTime SearchPathW SetProcessShutdownParameters CreateMutexA FormatMessageA InterlockedCompareExchange EnumDateFormatsW GlobalAlloc GetFileInformationByHandle GetConsoleScreenBufferInfo SetFileShortNameA EnumCalendarInfoExW GetFileAttributesA GetSystemWindowsDirectoryA GetComputerNameA ReadConsoleInputW EnumDateFormatsA _hread GetConsoleAliasA CreateIoCompletionPort lstrcatW GetDefaultCommConfigW GetFullPathNameW DebugBreakProcess SetCurrentDirectoryW SetCalendarInfoW ReadConsoleOutputCharacterW CopyFileExW GetModuleHandleW FindNextFileA MoveFileA DeleteFileA RaiseException GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW GetStdHandle GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA

gdi32

SelectObject GetCharWidthA GetBoundsRect

Sharing