file[.]exe | Triage™

General

Target
file.exe
Size 204KB
Sample220905-1mlrysade7
SHA256 db712cfee73091f2f54d00783998b90b73cff3f8ebf651814e499f3b1d8c2f4a
MD5 d9da1a89f4e82c25df92ab2d4661f08c
SHA1 c707fc68cc7d5e21e947dbcca7a9907e908eefc0
SHA512 c5419cbe458fb984b45dda5c6ed89a4d4738eac08c6d517c2c210e6122b4d24469f4f4d2c830d1dfe72354e42a34cb020e15aec9df06683a42676f63b593462f
SSDEEP 3072:rb95VNa8LmTFejaODD1BsfNiR4R2/OhfMm51mvvASORv4tA:HLmxe/D1B+iR42/OKE1qvASOd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 204KB

file.exe

IMPHASH b7f7e96c695134611d315f820827b5fd
SHA256 db712cfee73091f2f54d00783998b90b73cff3f8ebf651814e499f3b1d8c2f4a
MD5 d9da1a89f4e82c25df92ab2d4661f08c
SHA1 c707fc68cc7d5e21e947dbcca7a9907e908eefc0
SHA512 c5419cbe458fb984b45dda5c6ed89a4d4738eac08c6d517c2c210e6122b4d24469f4f4d2c830d1dfe72354e42a34cb020e15aec9df06683a42676f63b593462f
SSDEEP 3072:rb95VNa8LmTFejaODD1BsfNiR4R2/OhfMm51mvvASORv4tA:HLmxe/D1B+iR42/OKE1qvASOd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18881

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringW OpenWaitableTimerA WaitNamedPipeA CommConfigDialogW SetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetCPInfoExA EnumResourceTypesA GetModuleFileNameW WriteConsoleOutputCharacterA GetConsoleAliasesLengthW DeleteFileW FillConsoleOutputCharacterA LocalAlloc GetProcAddress VirtualAlloc LoadLibraryW ReleaseActCtx GetConsoleAliasA GetModuleHandleA WritePrivateProfileStringW EnumResourceNamesW UnlockFileEx lstrcpynA AddAtomW GenerateConsoleCtrlEvent GetSystemDefaultLCID GetSystemDefaultLangID GetLastError GetComputerNameW FindNextFileW GetPriorityClass SetConsoleCursorInfo OpenJobObjectW InitializeCriticalSection FindResourceExW GetConsoleMode _hwrite GlobalWire GetComputerNameA VerifyVersionInfoA GetStringTypeA SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileAttributesExA SetComputerNameW GetFileAttributesA ReadConsoleA GetVolumePathNameA FindFirstChangeNotificationW CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RaiseException GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc RtlUnwind SetFilePointer ReadFile SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidth32A GetFontUnicodeRanges

winhttp

WinHttpWriteData

msimg32

AlphaBlend

Sharing