file[.]exe | Triage™

General

Target
file.exe
Size 259KB
Sample220906-1ybq5aaec6
SHA256 94289cd347905655b4e4922567ae9078bcf99c65d58aebb1dfa7346d77cece50
MD5 0d09c3200218dfc92cc68be8f657e3a2
SHA1 0c1ff10e7ab7df67c332014def71eb3040d71518
SHA512 1be4b4965d320b2a86981fd6082d6f6f858a3e4f648b65c6e99785edfbcf46ac3a4d2045ab97c58ea269b830daf0ec154e9af7746bb063f7ce6b30b817d404c6
SSDEEP 6144:FMWup6XD5CaegjuObTH7ln2p5M6gG6cK9/Cx:FM0XtD7juObTH7wp5MHL9I
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 259KB

file.exe

IMPHASH fffc9730bcd3ee983250f18d92247c75
SHA256 94289cd347905655b4e4922567ae9078bcf99c65d58aebb1dfa7346d77cece50
MD5 0d09c3200218dfc92cc68be8f657e3a2
SHA1 0c1ff10e7ab7df67c332014def71eb3040d71518
SHA512 1be4b4965d320b2a86981fd6082d6f6f858a3e4f648b65c6e99785edfbcf46ac3a4d2045ab97c58ea269b830daf0ec154e9af7746bb063f7ce6b30b817d404c6
SSDEEP 6144:FMWup6XD5CaegjuObTH7ln2p5M6gG6cK9/Cx:FM0XtD7juObTH7wp5MHL9I
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39424

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteAtom GetProfileSectionW VerifyVersionInfoW LocalFree GetProcessPriorityBoost VirtualQuery GlobalGetAtomNameA GetComputerNameExA FindResourceW GetComputerNameExW GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleW VirtualProtect _lread UnlockFile GetPrivateProfileStructA GetDiskFreeSpaceExA DefineDosDeviceW SetVolumeMountPointW GetAtomNameW SetConsoleScreenBufferSize EnumResourceLanguagesA GetCPInfoExW SetThreadContext lstrlenW SetProcessAffinityMask SetConsoleCtrlHandler IsProcessInJob CopyFileA lstrcpynA WriteConsoleW GetLastError GetCommandLineW FormatMessageW CreateJobObjectW InitializeCriticalSection FindNextVolumeA GetConsoleCursorInfo MoveFileWithProgressW WriteProfileSectionW AddAtomW InterlockedDecrement LoadLibraryA GetProfileSectionA GetDefaultCommConfigA SetLastError TerminateThread HeapFree LeaveCriticalSection GetComputerNameA EnumSystemLocalesW GetVersion OpenMutexW LocalFileTimeToFileTime SearchPathW GetProcessShutdownParameters CreateMutexA FormatMessageA EnumDateFormatsW InterlockedExchangeAdd FoldStringW GlobalAlloc GetFileInformationByHandle GetNumberOfConsoleInputEvents GetFileAttributesA GetSystemWindowsDirectoryA ReadConsoleInputA EnumDateFormatsA GetPrivateProfileStructW _hread CreateIoCompletionPort lstrcatW GetFullPathNameA DebugSetProcessKillOnExit SetCurrentDirectoryA SetCalendarInfoA lstrcpyA FindNextFileW ReadConsoleOutputCharacterA CopyFileExA GetConsoleAliasA MoveFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedIncrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW LoadLibraryW MultiByteToWideChar WideCharToMultiByte LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA DeleteFileA

user32

GetMessageTime

gdi32

GetCharWidthA GetBoundsRect SelectObject

Sharing