file[.]exe | Triage™

General

Target
file.exe
Size 200KB
Sample220907-lfbwvabef6
SHA256 ad1dd347b0a9c82f2eef78b018560c2cbb95c9c9ed1f13de7735ab85485fa272
MD5 f4d5421dfde9f4f7c0f8cd0b4456665d
SHA1 d1aab89f6335b3c408c460f70dc164dceb76350e
SHA512 27944432a0ffcf6da2e9cf75cae6fc903cf8ae0613a902b90138388be41781d5dd9619c4b735134cb77b12d5e29dbcd7782fdd8b308f6885b69e567621bbaba9
SSDEEP 3072:MS4H2Par2D8Gb9WmmBaZelwnXrSTaihmY6ziXlrWl7j:UH32xmB6MWXrShmY6wwl7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 200KB

file.exe

IMPHASH 21321f2f4a13cc319416648570b3eadf
SHA256 ad1dd347b0a9c82f2eef78b018560c2cbb95c9c9ed1f13de7735ab85485fa272
MD5 f4d5421dfde9f4f7c0f8cd0b4456665d
SHA1 d1aab89f6335b3c408c460f70dc164dceb76350e
SHA512 27944432a0ffcf6da2e9cf75cae6fc903cf8ae0613a902b90138388be41781d5dd9619c4b735134cb77b12d5e29dbcd7782fdd8b308f6885b69e567621bbaba9
SSDEEP 3072:MS4H2Par2D8Gb9WmmBaZelwnXrSTaihmY6ziXlrWl7j:UH32xmB6MWXrShmY6wwl7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19840

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenWaitableTimerA WaitNamedPipeA CommConfigDialogA SetSystemTimeAdjustment SearchPathA EnumResourceTypesA DeleteFileW GetConsoleAliasesLengthW FillConsoleOutputCharacterA WriteConsoleOutputCharacterW LocalAlloc GetProcAddress VirtualAlloc LoadLibraryW ReleaseActCtx GetConsoleAliasA FindFirstChangeNotificationW WritePrivateProfileStringA EnumResourceNamesW GetModuleHandleA lstrcpynA AddAtomA GenerateConsoleCtrlEvent GetLastError GetSystemDefaultLCID GetSystemDefaultLangID FindNextFileW GetPriorityClass SetConsoleCursorInfo OpenJobObjectW InitializeCriticalSection FindResourceExA GetConsoleMode _hwrite GlobalWire GetComputerNameW VerifyVersionInfoA GetStringTypeA FillConsoleOutputCharacterW SetFileShortNameA GetVolumeNameForVolumeMountPointW GetFileAttributesExA SetComputerNameW GetFileAttributesA ReadConsoleA GetVolumePathNameA FoldStringA UnlockFileEx CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA RaiseException GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc RtlUnwind SetFilePointer ReadFile SetStdHandle GetConsoleCP FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ScreenToClient

gdi32

GetCharWidth32A GetFontLanguageInfo

msimg32

AlphaBlend

Sharing