file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample220906-lnrl9saga7
SHA256 a15f831acece5df93f4de227b06aa7c119724228c679cb242e4d1931eb0bb31f
MD5 7136b7f6380796b954962c6795a86191
SHA1 8a2864a0adef4996a8fb597469d232e38e46127b
SHA512 13f1bd7610b7331907ecaefd7d930363c2322c8241eee257edf2c32ca34542f40a2e44c8da88a44ad1d42336bb54d1a3fcc94f5626f04265f82ca09052adcdbf
SSDEEP 6144:6qJn6P4UDSxuy6YjURFcohokYWacg7faWIQ4a47:nJc4UugVYjURFcoho0acOfoQ43
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH 98223af1f2fdb26acc2c5722544be4e4
SHA256 a15f831acece5df93f4de227b06aa7c119724228c679cb242e4d1931eb0bb31f
MD5 7136b7f6380796b954962c6795a86191
SHA1 8a2864a0adef4996a8fb597469d232e38e46127b
SHA512 13f1bd7610b7331907ecaefd7d930363c2322c8241eee257edf2c32ca34542f40a2e44c8da88a44ad1d42336bb54d1a3fcc94f5626f04265f82ca09052adcdbf
SSDEEP 6144:6qJn6P4UDSxuy6YjURFcohokYWacg7faWIQ4a47:nJc4UugVYjURFcoho0acOfoQ43
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39824

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteAtom GetProfileSectionA VerifyVersionInfoW QueryDosDeviceW LocalFree GetProcessPriorityBoost VirtualQuery GlobalGetAtomNameW FindResourceA GetComputerNameExA GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress VirtualProtect _lwrite LockFile GetPrivateProfileStructA GetDiskFreeSpaceExA DefineDosDeviceW SetVolumeMountPointW GetAtomNameW SetConsoleScreenBufferSize TerminateProcess EnumResourceLanguagesA GetCPInfoExW SetThreadContext lstrlenW SetProcessAffinityMask SetConsoleCtrlHandler IsProcessInJob CopyFileW lstrcpynA WriteConsoleW GetCommandLineA GetLastError GetCommandLineW SearchPathA FormatMessageW CreateJobObjectA InitializeCriticalSection FindNextVolumeA GetConsoleCursorInfo GetModuleHandleW LoadLibraryW MoveFileWithProgressW AddAtomW InterlockedDecrement LoadLibraryA GetProfileSectionW GetDefaultCommConfigA GetConsoleAliasW SetLastError TerminateThread HeapFree LeaveCriticalSection GetComputerNameA EnumSystemLocalesW GetVersion OpenMutexW LocalFileTimeToFileTime SearchPathW GetProcessShutdownParameters CreateMutexA FormatMessageA InterlockedExchangeAdd EnumDateFormatsW GetNumberOfConsoleInputEvents FoldStringW GlobalAlloc GetFileInformationByHandle GetConsoleScreenBufferInfo SetFileShortNameW EnumCalendarInfoExW GetFileAttributesA GetSystemWindowsDirectoryA ReadConsoleInputW EnumDateFormatsA GetPrivateProfileStructW _hread GetConsoleAliasA CreateIoCompletionPort lstrcatW GetDefaultCommConfigW GetFullPathNameW DebugBreakProcess SetCurrentDirectoryW SetCalendarInfoW lstrcpyA ReadConsoleOutputCharacterA CopyFileExW WriteProfileSectionW FindNextFileA MoveFileA DeleteFileA RaiseException GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedIncrement ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA

user32

GetMessageTime

gdi32

SelectObject GetCharWidthA GetBoundsRect

Sharing