file[.]exe | Triage™

General

Target
file.exe
Size 470KB
Sample220908-jjnnpsbbfm
SHA256 4eb2ed0c5a97c02116bdb6531fda7c742a3a64d7fa2a15938b0e9f42a7ba7b2d
MD5 4dec218e641a09710cff1e3173926d87
SHA1 c7c309db0cc3eb88e594e4734acb5ffab6a399da
SHA512 0e6d121fc6600bf1864dbaa680079137c4c67ee32ca51427b79d3ba71a6b9ab2565c64044d69107b2bc867af8182d0d4f0db6b5c1632a2eebc1c5a3b86303d01
SSDEEP 12288:LTxR4dTBSuPOjLye+8PM8p7HMB3zzSEK:LP4ZBSuPOj+8k3Bjz9K
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 470KB

file.exe

IMPHASH b7e16e45d5ca01868887e26a9f95ed7b
SHA256 4eb2ed0c5a97c02116bdb6531fda7c742a3a64d7fa2a15938b0e9f42a7ba7b2d
MD5 4dec218e641a09710cff1e3173926d87
SHA1 c7c309db0cc3eb88e594e4734acb5ffab6a399da
SHA512 0e6d121fc6600bf1864dbaa680079137c4c67ee32ca51427b79d3ba71a6b9ab2565c64044d69107b2bc867af8182d0d4f0db6b5c1632a2eebc1c5a3b86303d01
SSDEEP 12288:LTxR4dTBSuPOjLye+8PM8p7HMB3zzSEK:LP4ZBSuPOj+8k3Bjz9K
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19740

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnlockFile OpenWaitableTimerA WaitNamedPipeA CommConfigDialogA SetSystemTimeAdjustment SearchPathW EnumResourceTypesA DeleteFileW GetConsoleAliasesLengthW FillConsoleOutputCharacterW WriteConsoleOutputCharacterW LocalAlloc GetProcAddress VirtualAlloc LoadLibraryA ReleaseActCtx GetConsoleAliasA FindFirstChangeNotificationA WritePrivateProfileStringA EnumResourceNamesW GetModuleHandleA AddAtomA GetConsoleAliasesLengthA GenerateConsoleCtrlEvent GetLastError GetSystemDefaultLCID GetSystemDefaultLangID FindNextFileW GetPriorityClass SetConsoleCursorInfo OpenJobObjectW InitializeCriticalSection FindResourceExW GetConsoleMode _hwrite GlobalWire GetComputerNameW VerifyVersionInfoA GetStringTypeA SetFileShortNameA GetVolumeNameForVolumeMountPointW GetFileAttributesExA SetComputerNameA FillConsoleOutputCharacterA GetFileAttributesA ReadConsoleA GetVolumePathNameW FoldStringA lstrcpynA CreateFileA WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA RaiseException GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoA SetFilePointer ReadFile HeapAlloc HeapReAlloc SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind HeapSize WriteConsoleA GetConsoleOutputCP

user32

ScreenToClient

gdi32

GetCharWidth32A GetFontLanguageInfo

msimg32

AlphaBlend

Sharing