file[.]exe | Triage™

General

Target
file.exe
Size 199KB
Sample220907-ltcejabfe5
SHA256 6aaec12ffda00462a13eb85b47eb98e198f656c328ce260704591bebb9dd0516
MD5 aa98463a903698380081b0b64d13fb51
SHA1 07870a10ad998deb35dce24263019661740ef510
SHA512 3f7f6e5d9f867357654e5fdb75b8d96f1dcc26e77589d487c50471db4fa4ab6ce764a93732310b745dee999ab6d204b4507a5b9efecc360a628a1a99b320bcd5
SSDEEP 3072:2jChFFNC6Ndi8Gu66kTbcH7xcVP13CuRFl8O+YiV:nhM6NdJ66obc6+YF+O+Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 199KB

file.exe

IMPHASH 21321f2f4a13cc319416648570b3eadf
SHA256 6aaec12ffda00462a13eb85b47eb98e198f656c328ce260704591bebb9dd0516
MD5 aa98463a903698380081b0b64d13fb51
SHA1 07870a10ad998deb35dce24263019661740ef510
SHA512 3f7f6e5d9f867357654e5fdb75b8d96f1dcc26e77589d487c50471db4fa4ab6ce764a93732310b745dee999ab6d204b4507a5b9efecc360a628a1a99b320bcd5
SSDEEP 3072:2jChFFNC6Ndi8Gu66kTbcH7xcVP13CuRFl8O+YiV:nhM6NdJ66obc6+YF+O+Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19840

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenWaitableTimerA WaitNamedPipeA CommConfigDialogA SetSystemTimeAdjustment SearchPathA EnumResourceTypesA DeleteFileW GetConsoleAliasesLengthW FillConsoleOutputCharacterA WriteConsoleOutputCharacterW LocalAlloc GetProcAddress VirtualAlloc LoadLibraryW ReleaseActCtx GetConsoleAliasA FindFirstChangeNotificationW WritePrivateProfileStringA EnumResourceNamesW GetModuleHandleA lstrcpynA AddAtomA GenerateConsoleCtrlEvent GetLastError GetSystemDefaultLCID GetSystemDefaultLangID FindNextFileW GetPriorityClass SetConsoleCursorInfo OpenJobObjectW InitializeCriticalSection FindResourceExA GetConsoleMode _hwrite GlobalWire GetComputerNameW VerifyVersionInfoA GetStringTypeA FillConsoleOutputCharacterW SetFileShortNameA GetVolumeNameForVolumeMountPointW GetFileAttributesExA SetComputerNameW GetFileAttributesA ReadConsoleA GetVolumePathNameA FoldStringA UnlockFileEx CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA RaiseException GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc RtlUnwind SetFilePointer ReadFile SetStdHandle GetConsoleCP FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ScreenToClient

gdi32

GetCharWidth32A GetFontLanguageInfo

msimg32

AlphaBlend

Sharing