file[.]exe | Triage™

General

Target
file.exe
Size 261KB
Sample220906-ys9d4afcgn
SHA256 a0d2fbbaa71effaec0aa82d1bd762a40f1700bfa1bd217a3f0fbedacb32b4be7
MD5 d13edaac99d17026b72bb3867b95d5af
SHA1 e11e9e331f24da4286b8d8de7a25121c2632e69c
SHA512 d02963228efff5a9126f1498337f71e2f765457d603828b8b39fa4f0bd7fac605584295caa1b2e9233166ada811d6d800486ae85c3ca34dbbed4aa0f3e4d58ea
SSDEEP 6144:MhU1I2DDABgqn4dQTpPsJeHlKUzQFrZyG2bZoEAZ:MhJ2PKPn4dQTpPHHldzUT2bZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 261KB

file.exe

IMPHASH fffc9730bcd3ee983250f18d92247c75
SHA256 a0d2fbbaa71effaec0aa82d1bd762a40f1700bfa1bd217a3f0fbedacb32b4be7
MD5 d13edaac99d17026b72bb3867b95d5af
SHA1 e11e9e331f24da4286b8d8de7a25121c2632e69c
SHA512 d02963228efff5a9126f1498337f71e2f765457d603828b8b39fa4f0bd7fac605584295caa1b2e9233166ada811d6d800486ae85c3ca34dbbed4aa0f3e4d58ea
SSDEEP 6144:MhU1I2DDABgqn4dQTpPsJeHlKUzQFrZyG2bZoEAZ:MhJ2PKPn4dQTpPHHldzUT2bZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39440

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteAtom GetProfileSectionW VerifyVersionInfoW LocalFree GetProcessPriorityBoost VirtualQuery GlobalGetAtomNameA GetComputerNameExA FindResourceW GetComputerNameExW GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleW VirtualProtect _lread UnlockFile GetPrivateProfileStructA GetDiskFreeSpaceExA DefineDosDeviceW SetVolumeMountPointW GetAtomNameW SetConsoleScreenBufferSize EnumResourceLanguagesA GetCPInfoExW SetThreadContext lstrlenW SetProcessAffinityMask SetConsoleCtrlHandler IsProcessInJob CopyFileA lstrcpynA WriteConsoleW GetLastError GetCommandLineW FormatMessageW CreateJobObjectW InitializeCriticalSection FindNextVolumeA GetConsoleCursorInfo MoveFileWithProgressW WriteProfileSectionW AddAtomW InterlockedDecrement LoadLibraryA GetProfileSectionA GetDefaultCommConfigA SetLastError TerminateThread HeapFree LeaveCriticalSection GetComputerNameA EnumSystemLocalesW GetVersion OpenMutexW LocalFileTimeToFileTime SearchPathW GetProcessShutdownParameters CreateMutexA FormatMessageA EnumDateFormatsW InterlockedExchangeAdd FoldStringW GlobalAlloc GetFileInformationByHandle GetNumberOfConsoleInputEvents GetFileAttributesA GetSystemWindowsDirectoryA ReadConsoleInputA EnumDateFormatsA GetPrivateProfileStructW _hread CreateIoCompletionPort lstrcatW GetFullPathNameA DebugSetProcessKillOnExit SetCurrentDirectoryA SetCalendarInfoA lstrcpyA FindNextFileW ReadConsoleOutputCharacterA CopyFileExA GetConsoleAliasA MoveFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedIncrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW LoadLibraryW MultiByteToWideChar WideCharToMultiByte LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA DeleteFileA

user32

GetMessageTime

gdi32

GetCharWidthA GetBoundsRect SelectObject

Sharing