file[.]exe | Triage™

General

Target
file.exe
Size 289KB
Sample220903-brs96afcdm
SHA256 913cb3199e32adb01f1c7f3d5045adfbba075f3caaf3eec7c2314b6daf1f53d8
MD5 098d663f144c5abf0b5d697073fcf22e
SHA1 ef2cd161155377eac2cca0b65f3b9f3bd428d55d
SHA512 e17b0a6d5b7418d172a432931cf3cd4a08bd117139407b8a5ac4912d8ea36a62bc0e6fce928b5b65adfddd99bd4919ce6828ab951c099893de4d1aeba1b3634c
SSDEEP 3072:IjSiLSrdd2zPVpdpvz4h98Q71ZO9nC3V4R:BEzC7jiCi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 289KB

file.exe

IMPHASH 854d9d7dc9eafeac5c1c13a6bab263b2
SHA256 913cb3199e32adb01f1c7f3d5045adfbba075f3caaf3eec7c2314b6daf1f53d8
MD5 098d663f144c5abf0b5d697073fcf22e
SHA1 ef2cd161155377eac2cca0b65f3b9f3bd428d55d
SHA512 e17b0a6d5b7418d172a432931cf3cd4a08bd117139407b8a5ac4912d8ea36a62bc0e6fce928b5b65adfddd99bd4919ce6828ab951c099893de4d1aeba1b3634c
SSDEEP 3072:IjSiLSrdd2zPVpdpvz4h98Q71ZO9nC3V4R:BEzC7jiCi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16634

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA FoldStringW SetWaitableTimer WaitNamedPipeA CommConfigDialogA SetSystemTimeAdjustment SearchPathA GetCPInfoExA GetModuleFileNameW DeleteFileA GetConsoleAliasesLengthA EnumResourceTypesW FillConsoleOutputCharacterW WriteConsoleOutputCharacterA LocalAlloc GetProcAddress GetModuleHandleW VirtualAlloc LoadLibraryW ReleaseActCtx GetStringTypeA FindFirstChangeNotificationW WritePrivateProfileStringW EnumResourceNamesA LocalReAlloc lstrcpynA AddAtomW FreeConsole GetThreadLocale GetSystemDefaultLCID GetLastError VirtualProtect GetComputerNameExW FindNextFileA GetPriorityClass ScrollConsoleScreenBufferA OpenJobObjectW InitializeCriticalSection FindResourceExA SetConsoleMode _hwrite GlobalUnWire GetComputerNameA VerifyVersionInfoA IsDBCSLeadByte SetFileShortNameW GetFileAttributesExA WriteConsoleOutputCharacterW GetVolumePathNameA GetConsoleAliasW CloseHandle CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA SetFilePointer ReadFile SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidth32A GetFontUnicodeRanges

ole32

CoRegisterMallocSpy

msimg32

TransparentBlt

Sharing