file[.]exe | Triage™

General

Target
file.exe
Size 289KB
Sample220908-lpwydaebf4
SHA256 1d99ddd268999f74dca4db86de66032f58dc3e4674f2af2b0ed0770eff565c11
MD5 551267f434ceb0c65b68cdf48b0b62ba
SHA1 21cfec30cbc94f8a171dc104db76879e39303bd2
SHA512 af1f19fe3469a135e4a7d5afa49fdd6535e45a19ba94430a31feff6ae6df4e68a23f166c4c1210b078504477474adc294eabc530613b8bb9628ba87742b9c080
SSDEEP 6144:6hnkGkuhS8LoODJC1DUSBfOf4Ge7ry/4c7TbRVdpoTfS:xGk58LoOEySBfO+W/4KLi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 289KB

file.exe

IMPHASH 0aa70bbf9ba2bac339d1ac9390f0e308
SHA256 1d99ddd268999f74dca4db86de66032f58dc3e4674f2af2b0ed0770eff565c11
MD5 551267f434ceb0c65b68cdf48b0b62ba
SHA1 21cfec30cbc94f8a171dc104db76879e39303bd2
SHA512 af1f19fe3469a135e4a7d5afa49fdd6535e45a19ba94430a31feff6ae6df4e68a23f166c4c1210b078504477474adc294eabc530613b8bb9628ba87742b9c080
SSDEEP 6144:6hnkGkuhS8LoODJC1DUSBfOf4Ge7ry/4c7TbRVdpoTfS:xGk58LoOEySBfO+W/4KLi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

53760

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileWithProgressW DeleteAtom GetProfileSectionW VerifyVersionInfoW LocalFree GetProcessPriorityBoost VirtualProtect GlobalGetAtomNameA GetComputerNameExA FindResourceW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA _lread UnlockFile GetPrivateProfileStructA GetDiskFreeSpaceExA DefineDosDeviceA SetVolumeMountPointW GetAtomNameA SetConsoleScreenBufferSize EnumResourceLanguagesA GetCPInfoExW SetThreadContext lstrlenW GetProcessAffinityMask SetConsoleCtrlHandler IsProcessInJob CopyFileA lstrcpynA WriteConsoleW GetCommandLineW GetLastError GetCommandLineA InterlockedExchangeAdd FormatMessageW CreateJobObjectW InitializeCriticalSection FindNextVolumeA ReadConsoleOutputCharacterA GetConsoleAliasA AddAtomW InterlockedDecrement LoadLibraryA GetProfileSectionA GetDefaultCommConfigW SetLastError TerminateThread HeapFree LeaveCriticalSection GetComputerNameW EnumSystemLocalesW GetVersion OpenMutexA LocalFileTimeToFileTime SearchPathW GetProcessShutdownParameters FormatMessageA InterlockedCompareExchange EnumDateFormatsW FoldStringW GlobalAlloc GetFileInformationByHandle GetNumberOfConsoleInputEvents lstrcpyW lstrcpyA GetFileAttributesA GetSystemWindowsDirectoryA GetAtomNameW ReadConsoleInputA _hread CreateIoCompletionPort lstrcatA GetFullPathNameA DebugSetProcessKillOnExit AddAtomA SetCurrentDirectoryA SetCalendarInfoW FindNextFileW CopyFileExA GetConsoleCursorInfo MoveFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedIncrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW LoadLibraryW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA DeleteFileA

user32

GetMessageTime

gdi32

SelectObject GetBoundsRect

Sharing