file[.]exe | Triage™

General

Target
file.exe
Size 371KB
Sample220916-bgmpmaedc4
SHA256 4f0a99d88ea59bdde7193bf07b72a12dee3d65424ae878b0cea52e656c666b4b
MD5 fd0acfd70579998d20c331f81fd98b58
SHA1 2748d19da4f4a3f335fedee054e021fe803465c1
SHA512 bc6fd704605a7b12d14a88f7e7a6120af476b72d742ce8eda7d490bbd611b1f2a08fb031179e0fc080c478c038333266b920ea1bf1f6cd70e70dc0163c446f5b
SSDEEP 6144:f11fFNYSANGwt9cps6i5kJm/K9bdL/2PelpfJZILUySJpnuuD4OFk:fzFNfANGwtR6i5k0/or2Ped6LUySnnfG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 371KB

file.exe

IMPHASH b6bedcb856f1ec78742547ac6d88521a
SHA256 4f0a99d88ea59bdde7193bf07b72a12dee3d65424ae878b0cea52e656c666b4b
MD5 fd0acfd70579998d20c331f81fd98b58
SHA1 2748d19da4f4a3f335fedee054e021fe803465c1
SHA512 bc6fd704605a7b12d14a88f7e7a6120af476b72d742ce8eda7d490bbd611b1f2a08fb031179e0fc080c478c038333266b920ea1bf1f6cd70e70dc0163c446f5b
SSDEEP 6144:f11fFNYSANGwt9cps6i5kJm/K9bdL/2PelpfJZILUySJpnuuD4OFk:fzFNfANGwtR6i5k0/or2Ped6LUySnnfG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39856

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileSectionW VerifyVersionInfoA LocalFree GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA VirtualUnlock GetTapeParameters LockFile GetAtomNameA SetConsoleScreenBufferSize SetProcessAffinityMask EnumResourceLanguagesW GetCPInfoExA SetThreadContext lstrlenA GetProcessAffinityMask SetConsoleCtrlHandler GlobalGetAtomNameW SetInformationJobObject lstrcpynA WriteConsoleA MoveFileWithProgressA GetBinaryTypeA GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleA SearchPathA CreateActCtxA FormatMessageA InitializeCriticalSection FindNextVolumeA GetCurrentConsoleFont LoadLibraryA GetConsoleAliasW LoadLibraryW ExitProcess MoveFileWithProgressW LeaveCriticalSection EnumSystemLocalesW OpenMutexA FileTimeToLocalFileTime SearchPathW GetProcessShutdownParameters FindResourceA FormatMessageW CreateIoCompletionPort GetPrivateProfileStructW CreateFiber InterlockedExchange EnumDateFormatsA FindResourceExA InterlockedIncrement FindActCtxSectionGuid SetConsoleCursorInfo UnregisterWait FoldStringW LocalAlloc GetFileType GetNumberOfConsoleInputEvents GetProfileSectionA SetDefaultCommConfigW SetLastError GetMailslotInfo GetSystemDefaultUILanguage GetFileAttributesA GetSystemWindowsDirectoryA GetAtomNameW GetComputerNameA ReadConsoleInputA EnumTimeFormatsA GetPrivateProfileStructA _hwrite GetConsoleAliasA lstrcatA GetFullPathNameW DebugSetProcessKillOnExit AddAtomA SetCurrentDirectoryW SetCalendarInfoA CopyFileExA HeapAlloc FindNextChangeNotification DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperW

gdi32

GetCharWidthW SelectObject

Sharing