file[.]exe | Triage™

General

Target
file.exe
Size 289KB
Sample220904-frlbrsdba4
SHA256 6ec74cc0a9b5697efd3f4cc4d3a21d9ffe6e0187b770990df8743fbf4f3b2518
MD5 6548eec09f4d8bc6514bee3e5452541c
SHA1 7be46c62d975949fdd6777530940cf6435e8cb90
SHA512 3fd3d3a809aaa4639ca1b815a95f60ee8ff789922090be4bfe6b10161b0efbaa4f1c96bcf93d498d641caffacd4c6808d275920127c692b64ab1148bccc6640a
SSDEEP 3072:C3twbyJdvGwRCf/swDQheOAmN4hMRl37G:8EacOAmN6C
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 289KB

file.exe

IMPHASH f40e8f975cf118eadd4d99d120d05f77
SHA256 6ec74cc0a9b5697efd3f4cc4d3a21d9ffe6e0187b770990df8743fbf4f3b2518
MD5 6548eec09f4d8bc6514bee3e5452541c
SHA1 7be46c62d975949fdd6777530940cf6435e8cb90
SHA512 3fd3d3a809aaa4639ca1b815a95f60ee8ff789922090be4bfe6b10161b0efbaa4f1c96bcf93d498d641caffacd4c6808d275920127c692b64ab1148bccc6640a
SSDEEP 3072:C3twbyJdvGwRCf/swDQheOAmN4hMRl37G:8EacOAmN6C
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16628

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA SetWaitableTimer WaitNamedPipeA CommConfigDialogA GetSystemTimeAdjustment SearchPathA GetCPInfoExA GetModuleFileNameW DeleteFileA GetConsoleAliasesLengthA EnumResourceTypesW FillConsoleOutputCharacterW WriteConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA ReleaseActCtx GetConsoleAliasW GetStringTypeA WritePrivateProfileStringW EnumResourceNamesA LocalReAlloc lstrcpynA AddAtomW FreeConsole GetSystemDefaultLCID GetSystemDefaultLangID GetLastError GlobalAlloc GetComputerNameExW FindNextFileA GetPriorityClass ScrollConsoleScreenBufferA OpenJobObjectW InitializeCriticalSection FindResourceExA SetConsoleMode _hwrite GlobalWire GetComputerNameA VerifyVersionInfoA IsDBCSLeadByte FillConsoleOutputCharacterA SetFileShortNameA GetVolumeNameForVolumeMountPointW GetFileAttributesExA GetVolumePathNameA FoldStringA FindFirstChangeNotificationW CloseHandle CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA SetFilePointer ReadFile SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidth32A GetFontUnicodeRanges

ole32

CoRegisterMallocSpy

msimg32

TransparentBlt

Sharing