file[.]exe | Triage™

General

Target
file.exe
Size 371KB
Sample220915-3c4wwsecd9
SHA256 dbd564c49bdb7304272ef7bb82fe535b79e1fad2db68f1381ccf14452582b2cb
MD5 93c8386c2cea959c13d417e8138d33f1
SHA1 09eb1d5ad3b5a14887c70deb2a9b1c14e23aa897
SHA512 b9e1c092c9a17a57a2909a3ae562e9e0a51fdfba5c66340c3de17c243b5ce4d6f10d9aafe20dfcebb4fea677b3351f465c638aac206dddac49d7eb67ea774779
SSDEEP 6144:S62QkkWY3vhpgvLd8TncS5lQLWlCF+km/C98QSxd6gkslEwFc:S6qkWyvhpgvacS5lQLGG8Qaf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 371KB

file.exe

IMPHASH b6bedcb856f1ec78742547ac6d88521a
SHA256 dbd564c49bdb7304272ef7bb82fe535b79e1fad2db68f1381ccf14452582b2cb
MD5 93c8386c2cea959c13d417e8138d33f1
SHA1 09eb1d5ad3b5a14887c70deb2a9b1c14e23aa897
SHA512 b9e1c092c9a17a57a2909a3ae562e9e0a51fdfba5c66340c3de17c243b5ce4d6f10d9aafe20dfcebb4fea677b3351f465c638aac206dddac49d7eb67ea774779
SSDEEP 6144:S62QkkWY3vhpgvLd8TncS5lQLWlCF+km/C98QSxd6gkslEwFc:S6qkWyvhpgvacS5lQLGG8Qaf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39872

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileSectionW VerifyVersionInfoA LocalFree GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA VirtualUnlock GetTapeParameters LockFile GetAtomNameA SetConsoleScreenBufferSize SetProcessAffinityMask EnumResourceLanguagesW GetCPInfoExA SetThreadContext lstrlenA GetProcessAffinityMask SetConsoleCtrlHandler GlobalGetAtomNameW SetInformationJobObject lstrcpynA WriteConsoleA MoveFileWithProgressA GetBinaryTypeA GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleA SearchPathA CreateActCtxA FormatMessageA InitializeCriticalSection FindNextVolumeA GetCurrentConsoleFont LoadLibraryA GetConsoleAliasW LoadLibraryW ExitProcess MoveFileWithProgressW LeaveCriticalSection EnumSystemLocalesW OpenMutexA FileTimeToLocalFileTime SearchPathW GetProcessShutdownParameters FindResourceA FormatMessageW CreateIoCompletionPort GetPrivateProfileStructW CreateFiber InterlockedExchange EnumDateFormatsA FindResourceExA InterlockedIncrement FindActCtxSectionGuid SetConsoleCursorInfo UnregisterWait FoldStringW LocalAlloc GetFileType GetNumberOfConsoleInputEvents GetProfileSectionA SetDefaultCommConfigW SetLastError GetMailslotInfo GetSystemDefaultUILanguage GetFileAttributesA GetSystemWindowsDirectoryA GetAtomNameW GetComputerNameA ReadConsoleInputA EnumTimeFormatsA GetPrivateProfileStructA _hwrite GetConsoleAliasA lstrcatA GetFullPathNameW DebugSetProcessKillOnExit AddAtomA SetCurrentDirectoryW SetCalendarInfoA CopyFileExA HeapAlloc FindNextChangeNotification DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperW

gdi32

GetCharWidthW SelectObject

Sharing