file[.]exe | Triage™

General

Target
file.exe
Size 382KB
Sample220915-3dphlaece3
SHA256 322f8b985672fe452211e1299a29037be69a9b467e8a8cdcad02afd0835e1dee
MD5 9b57e42650ac3801c41097a7a67c8797
SHA1 047b845b1fe47b819de4b31ade6e504aa0288e06
SHA512 2361e69ad10dd9c75c732bcbbc01edf85b3bb0b07b357718e27657576a04d468cfc7a17c427e4cb8a3a3999c589077dd87fc3404a5bdde41de03278aba54ba85
SSDEEP 6144:TFZHZNNCrw07qW5WzNSrcYlbl6w2EWVb2G03gNcryi2KTjig:h/N8rwgqW5aLYlbEBoGdTbKTj
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 382KB

file.exe

IMPHASH 6ff4f960cdca9799b658777401117540
SHA256 322f8b985672fe452211e1299a29037be69a9b467e8a8cdcad02afd0835e1dee
MD5 9b57e42650ac3801c41097a7a67c8797
SHA1 047b845b1fe47b819de4b31ade6e504aa0288e06
SHA512 2361e69ad10dd9c75c732bcbbc01edf85b3bb0b07b357718e27657576a04d468cfc7a17c427e4cb8a3a3999c589077dd87fc3404a5bdde41de03278aba54ba85
SSDEEP 6144:TFZHZNNCrw07qW5WzNSrcYlbl6w2EWVb2G03gNcryi2KTjig:h/N8rwgqW5aLYlbEBoGdTbKTj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38000

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileWithProgressA GetProfileSectionA VerifyVersionInfoA LocalFree GetProcessPriorityBoost VirtualQuery GlobalGetAtomNameW FindResourceExW GetComputerNameExW GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsA GetProcAddress VirtualLock GetTapeParameters LockFile GetAtomNameA SetConsoleScreenBufferSize TerminateProcess EnumResourceLanguagesW GetCPInfoExW SetThreadContext lstrlenA SetProcessAffinityMask SetConsoleCtrlHandler GlobalGetAtomNameA IsProcessInJob lstrcpynW WriteConsoleA GetCommandLineW MoveFileWithProgressW GetBinaryTypeA GetCommandLineA InterlockedDecrement GetCalendarInfoA GetConsoleTitleA SearchPathW CreateActCtxW FormatMessageA InitializeCriticalSection FindNextVolumeW GetCurrentConsoleFont CopyFileA GetModuleHandleW GetConsoleAliasA LoadLibraryA LoadLibraryW CopyFileExA HeapReAlloc LeaveCriticalSection EnumSystemLocalesA OpenMutexW FileTimeToLocalFileTime SearchPathA GetProcessShutdownParameters FindResourceA FormatMessageW InterlockedExchangeAdd CreateIoCompletionPort GetPrivateProfileStructA CreateFiber InterlockedExchange EnumDateFormatsA FindResourceExA InterlockedIncrement FindActCtxSectionStringA SetConsoleCursorInfo UnregisterWait FoldStringA LocalAlloc GetFileType GetNumberOfConsoleInputEvents SetDefaultCommConfigW SetLastError GetMailslotInfo SetThreadLocale GetFileAttributesA GetSystemWindowsDirectoryW GetComputerNameA ReadConsoleInputA EnumTimeFormatsA GetPrivateProfileStructW _hwrite GetQueuedCompletionStatus lstrcatW GetFullPathNameA DebugSetProcessKillOnExit AddAtomW SetCurrentDirectoryA SetCalendarInfoA CreateFileA ExitProcess FindNextChangeNotification GetLastError DeleteFileA RaiseException GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP CloseHandle

user32

CharUpperW GetMessageTime LoadMenuA

gdi32

SelectObject

Sharing