file[.]exe | Triage™

General

Target
file.exe
Size 290KB
Sample220903-2h8xcsgff6
SHA256 03a2bcf6c179bb3d014bc62986eac6bb20f8cf21ee9433937847d19a06bb593c
MD5 e6d47f9f9c1ee745ac2d0aca131732a6
SHA1 0d2fc526abd706b031b0ba5a370ae8457d72f7e8
SHA512 0b8560b66ae42971094b0f5e5bee89ba256e28b4ca7fcdc101a495ac8c50f454920960779a6a77bb505cae1a4b8842a520480652f669a275ac20f94d7c02056b
SSDEEP 3072:OBPb6DOdeGwacUjnlpmaWd2uLmVLFWPsUQO:qzc2nlwaWfLmVLw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 290KB

file.exe

IMPHASH f40e8f975cf118eadd4d99d120d05f77
SHA256 03a2bcf6c179bb3d014bc62986eac6bb20f8cf21ee9433937847d19a06bb593c
MD5 e6d47f9f9c1ee745ac2d0aca131732a6
SHA1 0d2fc526abd706b031b0ba5a370ae8457d72f7e8
SHA512 0b8560b66ae42971094b0f5e5bee89ba256e28b4ca7fcdc101a495ac8c50f454920960779a6a77bb505cae1a4b8842a520480652f669a275ac20f94d7c02056b
SSDEEP 3072:OBPb6DOdeGwacUjnlpmaWd2uLmVLFWPsUQO:qzc2nlwaWfLmVLw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16628

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA SetWaitableTimer WaitNamedPipeA CommConfigDialogA GetSystemTimeAdjustment SearchPathA GetCPInfoExA GetModuleFileNameW DeleteFileA GetConsoleAliasesLengthA EnumResourceTypesW FillConsoleOutputCharacterW WriteConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA ReleaseActCtx GetConsoleAliasW GetStringTypeA WritePrivateProfileStringW EnumResourceNamesA LocalReAlloc lstrcpynA AddAtomW FreeConsole GetSystemDefaultLCID GetSystemDefaultLangID GetLastError GlobalAlloc GetComputerNameExW FindNextFileA GetPriorityClass ScrollConsoleScreenBufferA OpenJobObjectW InitializeCriticalSection FindResourceExA SetConsoleMode _hwrite GlobalWire GetComputerNameA VerifyVersionInfoA IsDBCSLeadByte FillConsoleOutputCharacterA SetFileShortNameA GetVolumeNameForVolumeMountPointW GetFileAttributesExA GetVolumePathNameA FoldStringA FindFirstChangeNotificationW CloseHandle CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA SetFilePointer ReadFile SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidth32A GetFontUnicodeRanges

ole32

CoRegisterMallocSpy

msimg32

TransparentBlt

Sharing