file[.]exe | Triage™

General

Target
file.exe
Size 275KB
Sample220906-hfreradgcq
SHA256 fe1f5e45e91e278a80e0a812fc02b7ce2fbc022fe4d818d5ef8a7d686605fbf8
MD5 87f8b61829f843949359fe94c8f63750
SHA1 a3c713898ec8a94e541eb5e96d82dea7afe631cd
SHA512 df4d45603ef02bd67b5783b656cc3e3459421311392f028d9ffdabf25b2df63a31b6945c12ad8d8fd824d7d8e5b93ed38eaeb28f292a570071ab77cc73f7b381
SSDEEP 6144:T+qruCr5dfDV1mAZPLc9tWUGhNcszLDb09AXM7Hf+5W4ZKof1M:3rB5dfpgQPLcbWUGhNcgDb09M6G5WmKy
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 275KB

file.exe

IMPHASH ff0efa7e8c86069b68428d60a3a2b035
SHA256 fe1f5e45e91e278a80e0a812fc02b7ce2fbc022fe4d818d5ef8a7d686605fbf8
MD5 87f8b61829f843949359fe94c8f63750
SHA1 a3c713898ec8a94e541eb5e96d82dea7afe631cd
SHA512 df4d45603ef02bd67b5783b656cc3e3459421311392f028d9ffdabf25b2df63a31b6945c12ad8d8fd824d7d8e5b93ed38eaeb28f292a570071ab77cc73f7b381
SSDEEP 6144:T+qruCr5dfDV1mAZPLc9tWUGhNcszLDb09AXM7Hf+5W4ZKof1M:3rB5dfpgQPLcbWUGhNcgDb09M6G5WmKy
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39696

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetHandleCount GetProfileSectionA VerifyVersionInfoW QueryDosDeviceA LocalFree GetProcessPriorityBoost VirtualQuery GlobalGetAtomNameW FindResourceA GetComputerNameExA GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress VirtualProtect _lwrite LockFile GetPrivateProfileStructA GetDiskFreeSpaceExW DefineDosDeviceW SetVolumeMountPointW GetAtomNameW SetConsoleScreenBufferSize TerminateProcess EnumResourceLanguagesA GetCPInfoExW SetThreadContext lstrlenW SetProcessAffinityMask SetConsoleCtrlHandler IsProcessInJob CopyFileW lstrcpynA WriteConsoleW GetCommandLineA GetLastError GetCommandLineW InterlockedIncrement SearchPathA FormatMessageW CreateJobObjectA InitializeCriticalSection FindNextVolumeA GetConsoleCursorInfo GetModuleHandleW MoveFileWithProgressW WriteProfileSectionW AddAtomW InterlockedDecrement LoadLibraryA GetProfileSectionW GetDefaultCommConfigA GetConsoleAliasW SetLastError TerminateThread HeapFree SetCriticalSectionSpinCount GetComputerNameA EnumSystemLocalesW DisableThreadLibraryCalls OpenMutexW LocalFileTimeToFileTime SearchPathW GetProcessShutdownParameters CreateMutexA FormatMessageA InterlockedExchangeAdd EnumDateFormatsW GetNumberOfConsoleInputEvents FoldStringW GlobalAlloc GetFileInformationByHandle GetConsoleScreenBufferInfo SetFileShortNameW EnumCalendarInfoExW GetFileAttributesA GetSystemWindowsDirectoryA ReadConsoleInputW EnumDateFormatsA _hread GetConsoleAliasA CreateIoCompletionPort lstrcatW GetDefaultCommConfigW GetFullPathNameW DebugBreakProcess SetCurrentDirectoryW SetCalendarInfoW lstrcpyA ReadConsoleOutputCharacterA CopyFileExW LoadLibraryW FindNextFileA MoveFileA DeleteFileA RaiseException GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW GetStdHandle GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA

user32

GetMessageTime

gdi32

SelectObject GetCharWidthA GetBoundsRect

Sharing