file[.]exe | Triage™

General

Target
file.exe
Size 306KB
Sample220910-sbkrhsacc5
SHA256 768e84be2f71c0f64a4f935f7233b47125fc4bc2c34fd53b15729dca3bb43761
MD5 38e48a5ec49253ff60579c5504b006e5
SHA1 16ecc51cf59b79b29214a92d49cc8e1a8004e9a9
SHA512 40dd969dba27df03e5f5c42aaa1843ff5b29b51e5c431bcc6cd5a9951cace18480e85383903c4fe58ca8254c2aa60cccccd14e3288c560d9033b77bf5b762d7d
SSDEEP 6144:Pyttl/9z6vvJbgzTqNamKCBDv5QLKxfNaKCwF1KeDx:P8l/9zkbAGNBnBDveYfAKB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 306KB

file.exe

IMPHASH e5eb0b6afc8cf9fc2d751b04e25286aa
SHA256 768e84be2f71c0f64a4f935f7233b47125fc4bc2c34fd53b15729dca3bb43761
MD5 38e48a5ec49253ff60579c5504b006e5
SHA1 16ecc51cf59b79b29214a92d49cc8e1a8004e9a9
SHA512 40dd969dba27df03e5f5c42aaa1843ff5b29b51e5c431bcc6cd5a9951cace18480e85383903c4fe58ca8254c2aa60cccccd14e3288c560d9033b77bf5b762d7d
SSDEEP 6144:Pyttl/9z6vvJbgzTqNamKCBDv5QLKxfNaKCwF1KeDx:P8l/9zkbAGNBnBDveYfAKB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

65600

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddAtomA GetProfileSectionW VerifyVersionInfoW LocalFree SetProcessPriorityBoost VirtualProtect GlobalGetAtomNameA GetComputerNameExW FindResourceW GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GetTapeParameters _lread UnlockFile GetPrivateProfileStructW GetDiskFreeSpaceExW DefineDosDeviceA SetVolumeMountPointA GetAtomNameA SetConsoleScreenBufferSize TerminateThread EnumResourceLanguagesW GetCPInfoExW GetThreadContext lstrlenW GetProcessAffinityMask GenerateConsoleCtrlEvent IsProcessInJob CopyFileA lstrcpynA WriteConsoleA MoveFileWithProgressW GetBinaryTypeA GetLastError SearchPathA GetCommandLineA InterlockedIncrement GetCalendarInfoW GetConsoleTitleW CopyFileW CreateActCtxW FindResourceA FormatMessageW MoveFileWithProgressA InitializeCriticalSection GetConsoleFontSize FindNextVolumeW GetCurrentConsoleFont GetConsoleAliasA AddAtomW InterlockedDecrement LoadLibraryA LoadLibraryW ExitThread HeapReAlloc LeaveCriticalSection GetComputerNameW EnumSystemLocalesW GetVersion OpenMutexA FileTimeToLocalFileTime SearchPathW GetProcessShutdownParameters FormatMessageA VerifyVersionInfoA InterlockedCompareExchange EnumDateFormatsA FoldStringA GlobalAlloc GetFileType GetNumberOfConsoleInputEvents GetDefaultCommConfigW SetLastError lstrcpyW GetMailslotInfo GetThreadLocale lstrcpyA GetFileAttributesA GetSystemWindowsDirectoryW ReadConsoleInputA EnumTimeFormatsA GetPrivateProfileStructA _hread GetQueuedCompletionStatus lstrcatA GetFullPathNameW DebugSetProcessKillOnExit SetCurrentDirectoryW SetCalendarInfoW ReadConsoleOutputCharacterA FindNextFileW CopyFileExW CreateJobObjectA FindNextChangeNotification Sleep DeleteCriticalSection EnterCriticalSection RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind MoveFileA GetStartupInfoA HeapValidate IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree DebugBreak GetStdHandle WriteFile OutputDebugStringA WriteConsoleW OutputDebugStringW ExitProcess SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapSize VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer SetStdHandle GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile CloseHandle CreateFileA DeleteFileA

user32

GetMessageTime

gdi32

SelectObject GetBoundsRect

advapi32

AbortSystemShutdownW

Sharing