file[.]exe | Triage™

General

Target
file.exe
Size 371KB
Sample220916-ddal1aeeb7
SHA256 3d30171e97dd5dd913a05f8af355c7fe1eb4ecee60ddb5a31f29ae472e23bac2
MD5 b04c219dad53c09735b086f704b9dc8c
SHA1 3f58ea2ece69d77e34ae2d114e1f966ad49f5137
SHA512 c1247a448038d63a4817f43db362512092de45041c6211ccbf4f8a7bfe70c791e9fc79e61d49d0cb11fa2a78c706e4a5a7b3d4d6544887404628a83526f02aa7
SSDEEP 6144:znclAmiGYnXrYk3+b616miR1+IqccxnOc19iwhZx/YMOJJ6L5I:zkAmiGaXrYk3D6miRHqcchOc1USZxQM4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 371KB

file.exe

IMPHASH b6bedcb856f1ec78742547ac6d88521a
SHA256 3d30171e97dd5dd913a05f8af355c7fe1eb4ecee60ddb5a31f29ae472e23bac2
MD5 b04c219dad53c09735b086f704b9dc8c
SHA1 3f58ea2ece69d77e34ae2d114e1f966ad49f5137
SHA512 c1247a448038d63a4817f43db362512092de45041c6211ccbf4f8a7bfe70c791e9fc79e61d49d0cb11fa2a78c706e4a5a7b3d4d6544887404628a83526f02aa7
SSDEEP 6144:znclAmiGYnXrYk3+b616miR1+IqccxnOc19iwhZx/YMOJJ6L5I:zkAmiGaXrYk3D6miRHqcchOc1USZxQM4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39856

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileSectionW VerifyVersionInfoA LocalFree GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA VirtualUnlock GetTapeParameters LockFile GetAtomNameA SetConsoleScreenBufferSize SetProcessAffinityMask EnumResourceLanguagesW GetCPInfoExA SetThreadContext lstrlenA GetProcessAffinityMask SetConsoleCtrlHandler GlobalGetAtomNameW SetInformationJobObject lstrcpynA WriteConsoleA MoveFileWithProgressA GetBinaryTypeA GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleA SearchPathA CreateActCtxA FormatMessageA InitializeCriticalSection FindNextVolumeA GetCurrentConsoleFont LoadLibraryA GetConsoleAliasW LoadLibraryW ExitProcess MoveFileWithProgressW LeaveCriticalSection EnumSystemLocalesW OpenMutexA FileTimeToLocalFileTime SearchPathW GetProcessShutdownParameters FindResourceA FormatMessageW CreateIoCompletionPort GetPrivateProfileStructW CreateFiber InterlockedExchange EnumDateFormatsA FindResourceExA InterlockedIncrement FindActCtxSectionGuid SetConsoleCursorInfo UnregisterWait FoldStringW LocalAlloc GetFileType GetNumberOfConsoleInputEvents GetProfileSectionA SetDefaultCommConfigW SetLastError GetMailslotInfo GetSystemDefaultUILanguage GetFileAttributesA GetSystemWindowsDirectoryA GetAtomNameW GetComputerNameA ReadConsoleInputA EnumTimeFormatsA GetPrivateProfileStructA _hwrite GetConsoleAliasA lstrcatA GetFullPathNameW DebugSetProcessKillOnExit AddAtomA SetCurrentDirectoryW SetCalendarInfoA CopyFileExA HeapAlloc FindNextChangeNotification DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperW

gdi32

GetCharWidthW SelectObject

Sharing