file[.]exe | Triage™

General

Target
file.exe
Size 259KB
Sample220906-11mamsfgem
SHA256 a6eac8f878da66913230ef94c6e8b5ca39e60f1a5957833e839f3d7ffabceba6
MD5 4ab6d67d30f77cade88d97860256a7e5
SHA1 bbbe60ad388298bbd767b92513a277c904e823f8
SHA512 4dc1ef0cc96f76baafc348502356c31c8c94672089c6f08eb43e8d9ca7dd4e590cd20e6ea5dd0975dd927b7da0e0412ac683d7ef8f19ec49377280b16bf00689
SSDEEP 6144:RWMZ3HuMD0xB779JTKBAUui7axtA1VKYUUxJR:RWQuMIjH9JTKBAUZaxy64R
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 259KB

file.exe

IMPHASH fffc9730bcd3ee983250f18d92247c75
SHA256 a6eac8f878da66913230ef94c6e8b5ca39e60f1a5957833e839f3d7ffabceba6
MD5 4ab6d67d30f77cade88d97860256a7e5
SHA1 bbbe60ad388298bbd767b92513a277c904e823f8
SHA512 4dc1ef0cc96f76baafc348502356c31c8c94672089c6f08eb43e8d9ca7dd4e590cd20e6ea5dd0975dd927b7da0e0412ac683d7ef8f19ec49377280b16bf00689
SSDEEP 6144:RWMZ3HuMD0xB779JTKBAUui7axtA1VKYUUxJR:RWQuMIjH9JTKBAUZaxy64R
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39440

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteAtom GetProfileSectionW VerifyVersionInfoW LocalFree GetProcessPriorityBoost VirtualQuery GlobalGetAtomNameA GetComputerNameExA FindResourceW GetComputerNameExW GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleW VirtualProtect _lread UnlockFile GetPrivateProfileStructA GetDiskFreeSpaceExA DefineDosDeviceW SetVolumeMountPointW GetAtomNameW SetConsoleScreenBufferSize EnumResourceLanguagesA GetCPInfoExW SetThreadContext lstrlenW SetProcessAffinityMask SetConsoleCtrlHandler IsProcessInJob CopyFileA lstrcpynA WriteConsoleW GetLastError GetCommandLineW FormatMessageW CreateJobObjectW InitializeCriticalSection FindNextVolumeA GetConsoleCursorInfo MoveFileWithProgressW WriteProfileSectionW AddAtomW InterlockedDecrement LoadLibraryA GetProfileSectionA GetDefaultCommConfigA SetLastError TerminateThread HeapFree LeaveCriticalSection GetComputerNameA EnumSystemLocalesW GetVersion OpenMutexW LocalFileTimeToFileTime SearchPathW GetProcessShutdownParameters CreateMutexA FormatMessageA EnumDateFormatsW InterlockedExchangeAdd FoldStringW GlobalAlloc GetFileInformationByHandle GetNumberOfConsoleInputEvents GetFileAttributesA GetSystemWindowsDirectoryA ReadConsoleInputA EnumDateFormatsA GetPrivateProfileStructW _hread CreateIoCompletionPort lstrcatW GetFullPathNameA DebugSetProcessKillOnExit SetCurrentDirectoryA SetCalendarInfoA lstrcpyA FindNextFileW ReadConsoleOutputCharacterA CopyFileExA GetConsoleAliasA MoveFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedIncrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW LoadLibraryW MultiByteToWideChar WideCharToMultiByte LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA DeleteFileA

user32

GetMessageTime

gdi32

GetCharWidthA GetBoundsRect SelectObject

Sharing