file[.]exe | Triage™

General

Target
file.exe
Size 259KB
Sample220906-2q313sfhap
SHA256 268eea29014e60deaab3b478eac47a92a3984cb60686aa808e01a095f25b9781
MD5 1b7ee767037801fa75f60080df1f5b3f
SHA1 8d0c42f11d9beab19c878485669d06eef8482806
SHA512 798745ac0d5f8f9253caac9a78d8ee2c5fea15097416fe570e85a2199b6939c69f6e8e3eedcc3d2081a5d12bcc2418f54147f18e97a20c6f26ecc011e0a98556
SSDEEP 6144:mW5pWCWSDUVB7AfSTbNnJ5i5p4VeWEZTGMAMZ:mW7WS4ncfSTbNnJYpNZHZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 259KB

file.exe

IMPHASH fffc9730bcd3ee983250f18d92247c75
SHA256 268eea29014e60deaab3b478eac47a92a3984cb60686aa808e01a095f25b9781
MD5 1b7ee767037801fa75f60080df1f5b3f
SHA1 8d0c42f11d9beab19c878485669d06eef8482806
SHA512 798745ac0d5f8f9253caac9a78d8ee2c5fea15097416fe570e85a2199b6939c69f6e8e3eedcc3d2081a5d12bcc2418f54147f18e97a20c6f26ecc011e0a98556
SSDEEP 6144:mW5pWCWSDUVB7AfSTbNnJ5i5p4VeWEZTGMAMZ:mW7WS4ncfSTbNnJYpNZHZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39440

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteAtom GetProfileSectionW VerifyVersionInfoW LocalFree GetProcessPriorityBoost VirtualQuery GlobalGetAtomNameA GetComputerNameExA FindResourceW GetComputerNameExW GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleW VirtualProtect _lread UnlockFile GetPrivateProfileStructA GetDiskFreeSpaceExA DefineDosDeviceW SetVolumeMountPointW GetAtomNameW SetConsoleScreenBufferSize EnumResourceLanguagesA GetCPInfoExW SetThreadContext lstrlenW SetProcessAffinityMask SetConsoleCtrlHandler IsProcessInJob CopyFileA lstrcpynA WriteConsoleW GetLastError GetCommandLineW FormatMessageW CreateJobObjectW InitializeCriticalSection FindNextVolumeA GetConsoleCursorInfo MoveFileWithProgressW WriteProfileSectionW AddAtomW InterlockedDecrement LoadLibraryA GetProfileSectionA GetDefaultCommConfigA SetLastError TerminateThread HeapFree LeaveCriticalSection GetComputerNameA EnumSystemLocalesW GetVersion OpenMutexW LocalFileTimeToFileTime SearchPathW GetProcessShutdownParameters CreateMutexA FormatMessageA EnumDateFormatsW InterlockedExchangeAdd FoldStringW GlobalAlloc GetFileInformationByHandle GetNumberOfConsoleInputEvents GetFileAttributesA GetSystemWindowsDirectoryA ReadConsoleInputA EnumDateFormatsA GetPrivateProfileStructW _hread CreateIoCompletionPort lstrcatW GetFullPathNameA DebugSetProcessKillOnExit SetCurrentDirectoryA SetCalendarInfoA lstrcpyA FindNextFileW ReadConsoleOutputCharacterA CopyFileExA GetConsoleAliasA MoveFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedIncrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW LoadLibraryW MultiByteToWideChar WideCharToMultiByte LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA DeleteFileA

user32

GetMessageTime

gdi32

GetCharWidthA GetBoundsRect SelectObject

Sharing