file[.]exe | Triage™

General

Target
file.exe
Size 265KB
Sample220912-ts35vshdbk
SHA256 60d3fbde28010f86727b2e42f463b32cbd734b16e07f1173ee8c8f9875bcacdb
MD5 e5e45f7178d7952a82cd2672a634abf2
SHA1 8557b1483c88437f8e0890524ad30274d9af1753
SHA512 dd3ef5ddcd87ba0d2c8291e18cf223edab1fc5daa5327395acb6a4cd4f0148f202251906057612f66289fab7618bd682f5504ba93e408ff610a11bdeeed8dded
SSDEEP 6144:IeCNow2xxmIVK3a7sfpRFZd2b1cDo/H1zjIkgk1:ITeJr/o3a7WpRFZd2bl/Vzjx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 265KB

file.exe

IMPHASH 672f4cae333cd1c185b703423ad03761
SHA256 60d3fbde28010f86727b2e42f463b32cbd734b16e07f1173ee8c8f9875bcacdb
MD5 e5e45f7178d7952a82cd2672a634abf2
SHA1 8557b1483c88437f8e0890524ad30274d9af1753
SHA512 dd3ef5ddcd87ba0d2c8291e18cf223edab1fc5daa5327395acb6a4cd4f0148f202251906057612f66289fab7618bd682f5504ba93e408ff610a11bdeeed8dded
SSDEEP 6144:IeCNow2xxmIVK3a7sfpRFZd2b1cDo/H1zjIkgk1:ITeJr/o3a7WpRFZd2bl/Vzjx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42368

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoA LocalFree SetProcessPriorityBoost VirtualQuery GlobalGetAtomNameW FindResourceW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA VirtualLock GetTapeParameters UnlockFile GetAtomNameA FlushConsoleInputBuffer TerminateProcess EnumResourceLanguagesW GetCPInfoExW SetThreadContext lstrlenA SetProcessAffinityMask GenerateConsoleCtrlEvent LoadLibraryW GlobalGetAtomNameA IsProcessInJob lstrcpynW WriteConsoleA MoveFileWithProgressW GetBinaryTypeA GetCommandLineA InterlockedDecrement VerifyVersionInfoW GetCalendarInfoA GetConsoleTitleA SearchPathW CopyFileW CreateActCtxW InitializeCriticalSection FindNextVolumeA GetCurrentConsoleFont GetConsoleAliasA CopyFileExW HeapReAlloc LeaveCriticalSection EnumSystemLocalesA OpenMutexA FileTimeToLocalFileTime SearchPathA GetComputerNameExA GetProcessShutdownParameters FormatMessageW InterlockedCompareExchange CreateIoCompletionPort GetPrivateProfileStructA CreateFiber InterlockedExchange EnumDateFormatsA GetNumberOfConsoleInputEvents LoadLibraryA FindResourceExW InterlockedIncrement FindActCtxSectionStringW SetConsoleCursorInfo UnregisterWait FoldStringW LocalAlloc GetFileType GetDefaultCommConfigA SetLastError lstrcpyW GetMailslotInfo GetThreadLocale GetFileAttributesA GetSystemWindowsDirectoryA GetComputerNameW ReadConsoleInputA EnumTimeFormatsA _hwrite GetQueuedCompletionStatus lstrcatW GetFullPathNameW DebugBreakProcess AddAtomW SetCurrentDirectoryA SetCalendarInfoW FindNextChangeNotification ExitProcess GetVolumeInformationW RaiseException GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError SetFilePointer GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize VirtualAlloc RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoA GetConsoleOutputCP CloseHandle CreateFileA

user32

GetMessageTime

gdi32

SelectObject GetBoundsRect

Sharing