file[.]exe | Triage™

General

Target
file.exe
Size 280KB
Sample220916-cykf9sacbm
SHA256 05a16e465c4aa7efcca992a294ba83fc2eac1d33cfa2af1faac0c70915fb1a97
MD5 9d8a4f0d70d2ad12ac594188364925a6
SHA1 75494c299a585f663095885afac47c40a6d723b7
SHA512 87d513a6cdc70f0fb0c85f3447f2a56dc0ddfb646b6078ce07aaf3f727f5f4aa939cd60c8c32c14b10e7baa41456d04c5ac59ff781fb33bc2eaca383cf60cdbe
SSDEEP 6144:80ZSGdyYDOTAK7e6EAnTcrZl0M21ulHZZQg:80FdyeOTAK7eycrZl0M24dE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 280KB

file.exe

IMPHASH b6bedcb856f1ec78742547ac6d88521a
SHA256 05a16e465c4aa7efcca992a294ba83fc2eac1d33cfa2af1faac0c70915fb1a97
MD5 9d8a4f0d70d2ad12ac594188364925a6
SHA1 75494c299a585f663095885afac47c40a6d723b7
SHA512 87d513a6cdc70f0fb0c85f3447f2a56dc0ddfb646b6078ce07aaf3f727f5f4aa939cd60c8c32c14b10e7baa41456d04c5ac59ff781fb33bc2eaca383cf60cdbe
SSDEEP 6144:80ZSGdyYDOTAK7e6EAnTcrZl0M21ulHZZQg:80FdyeOTAK7eycrZl0M24dE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39872

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileSectionW VerifyVersionInfoA LocalFree GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA VirtualUnlock GetTapeParameters LockFile GetAtomNameA SetConsoleScreenBufferSize SetProcessAffinityMask EnumResourceLanguagesW GetCPInfoExA SetThreadContext lstrlenA GetProcessAffinityMask SetConsoleCtrlHandler GlobalGetAtomNameW SetInformationJobObject lstrcpynA WriteConsoleA MoveFileWithProgressA GetBinaryTypeA GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleA SearchPathA CreateActCtxA FormatMessageA InitializeCriticalSection FindNextVolumeA GetCurrentConsoleFont LoadLibraryA GetConsoleAliasW LoadLibraryW ExitProcess MoveFileWithProgressW LeaveCriticalSection EnumSystemLocalesW OpenMutexA FileTimeToLocalFileTime SearchPathW GetProcessShutdownParameters FindResourceA FormatMessageW CreateIoCompletionPort GetPrivateProfileStructW CreateFiber InterlockedExchange EnumDateFormatsA FindResourceExA InterlockedIncrement FindActCtxSectionGuid SetConsoleCursorInfo UnregisterWait FoldStringW LocalAlloc GetFileType GetNumberOfConsoleInputEvents GetProfileSectionA SetDefaultCommConfigW SetLastError GetMailslotInfo GetSystemDefaultUILanguage GetFileAttributesA GetSystemWindowsDirectoryA GetAtomNameW GetComputerNameA ReadConsoleInputA EnumTimeFormatsA GetPrivateProfileStructA _hwrite GetConsoleAliasA lstrcatA GetFullPathNameW DebugSetProcessKillOnExit AddAtomA SetCurrentDirectoryW SetCalendarInfoA CopyFileExA HeapAlloc FindNextChangeNotification DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperW

gdi32

GetCharWidthW SelectObject

Sharing