file[.]exe | Triage™

General

Target
file.exe
Size 314KB
Sample220910-ml4dqadfdp
SHA256 625f23d74c935a0ec5ff9b0fe01d1b7c0581fb81fd92bd9c1e59bdc985358d5e
MD5 e91e16c45c8b79c4a6594668505a0439
SHA1 fab0725b24bb0b80bc25dec722b2eac68274e11f
SHA512 e2b42ae9f4e8af2aa74d8d08f05869b4ee5fac21848f463973f6551bb4342dd0f7fa3d06991b626a527aa65eb01a37f679d28954117b63c6f57cf64d949d9dc2
SSDEEP 6144:SukYlgcjJxkf0IFGK09Npc5vD2D0IweByThZmKfk/ryzxAuS:S8glf1Uf9fc5vD2D04sThZmKIyzOuS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 314KB

file.exe

IMPHASH f9833479f6e976e2dadb3708a4e7e8c9
SHA256 625f23d74c935a0ec5ff9b0fe01d1b7c0581fb81fd92bd9c1e59bdc985358d5e
MD5 e91e16c45c8b79c4a6594668505a0439
SHA1 fab0725b24bb0b80bc25dec722b2eac68274e11f
SHA512 e2b42ae9f4e8af2aa74d8d08f05869b4ee5fac21848f463973f6551bb4342dd0f7fa3d06991b626a527aa65eb01a37f679d28954117b63c6f57cf64d949d9dc2
SSDEEP 6144:SukYlgcjJxkf0IFGK09Npc5vD2D0IweByThZmKfk/ryzxAuS:S8glf1Uf9fc5vD2D04sThZmKIyzOuS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

71936

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddAtomA GetProfileSectionA VerifyVersionInfoW LocalFree SetProcessPriorityBoost VirtualProtect GlobalGetAtomNameA GetComputerNameExW FindResourceW GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GetTapeParameters _lread UnlockFile GetPrivateProfileStructW GetDiskFreeSpaceExA DefineDosDeviceA SetVolumeMountPointA GetAtomNameA SetConsoleScreenBufferSize TerminateThread EnumResourceLanguagesW GetCPInfoExW GetThreadContext lstrlenW GetProcessAffinityMask GenerateConsoleCtrlEvent IsProcessInJob CopyFileA lstrcpynA WriteConsoleA MoveFileWithProgressW GetBinaryTypeA GetProfileSectionW GetLastError SearchPathA GetCommandLineA InterlockedIncrement GetCalendarInfoW GetConsoleTitleW CopyFileW CreateActCtxW FindResourceA MoveFileWithProgressA CreateJobObjectA InitializeCriticalSection GetConsoleFontSize FindNextVolumeW GetCurrentConsoleFont GetConsoleAliasA AddAtomW InterlockedDecrement LoadLibraryA LoadLibraryW ExitThread HeapReAlloc LeaveCriticalSection GetComputerNameW EnumSystemLocalesW GetVersion OpenMutexA FileTimeToLocalFileTime SearchPathW GetProcessShutdownParameters FormatMessageA VerifyVersionInfoA InterlockedCompareExchange EnumDateFormatsA FoldStringA GlobalAlloc GetFileType GetNumberOfConsoleInputEvents GetDefaultCommConfigW SetLastError lstrcpyW lstrcpyA GetFileAttributesA GetSystemWindowsDirectoryW ReadConsoleInputA EnumTimeFormatsA GetPrivateProfileStructA _hread GetQueuedCompletionStatus lstrcatA GetFullPathNameA DebugSetProcessKillOnExit SetCurrentDirectoryW SetCalendarInfoW ReadConsoleOutputCharacterA FindNextFileW CopyFileExW FormatMessageW FindNextChangeNotification Sleep DeleteCriticalSection EnterCriticalSection RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind MoveFileA GetStartupInfoA HeapValidate IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree DebugBreak GetStdHandle WriteFile OutputDebugStringA WriteConsoleW OutputDebugStringW ExitProcess SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapSize VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer SetStdHandle GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile CloseHandle CreateFileA DeleteFileA

user32

GetMessageTime

gdi32

SelectObject GetBoundsRect

advapi32

AbortSystemShutdownW

Sharing