file[.]exe | Triage™

General

Target
file.exe
Size 372KB
Sample220916-e7namaaddk
SHA256 39e18ae1185a6b9229d15f8670f52e2ed098485e274e93fd9a48d30eab4a9a8d
MD5 5b9ebbca3ae633c21988c3411048840f
SHA1 75315c8104bef9cd90035edcb19363c3a612bafe
SHA512 83c40cfbf476e9a885d74165ddb2a673b61c958f81923856b6cec29df4b82570f79642bcc2e9837bfe332758ee69d0a79a51917de72b5b0267f26039831d00b7
SSDEEP 6144:YfRmAfSYpclyrdQ3beFvDcC1Q54xHe1JqPrguGcXi3ci0uwgS+PYfrosw96zrNHa:YfLfSYMyRQ3ecC1Q57JA4crAS+PMMr9G
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 372KB

file.exe

IMPHASH b6bedcb856f1ec78742547ac6d88521a
SHA256 39e18ae1185a6b9229d15f8670f52e2ed098485e274e93fd9a48d30eab4a9a8d
MD5 5b9ebbca3ae633c21988c3411048840f
SHA1 75315c8104bef9cd90035edcb19363c3a612bafe
SHA512 83c40cfbf476e9a885d74165ddb2a673b61c958f81923856b6cec29df4b82570f79642bcc2e9837bfe332758ee69d0a79a51917de72b5b0267f26039831d00b7
SSDEEP 6144:YfRmAfSYpclyrdQ3beFvDcC1Q54xHe1JqPrguGcXi3ci0uwgS+PYfrosw96zrNHa:YfLfSYMyRQ3ecC1Q57JA4crAS+PMMr9G
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39872

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileSectionW VerifyVersionInfoA LocalFree GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA VirtualUnlock GetTapeParameters LockFile GetAtomNameA SetConsoleScreenBufferSize SetProcessAffinityMask EnumResourceLanguagesW GetCPInfoExA SetThreadContext lstrlenA GetProcessAffinityMask SetConsoleCtrlHandler GlobalGetAtomNameW SetInformationJobObject lstrcpynA WriteConsoleA MoveFileWithProgressA GetBinaryTypeA GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleA SearchPathA CreateActCtxA FormatMessageA InitializeCriticalSection FindNextVolumeA GetCurrentConsoleFont LoadLibraryA GetConsoleAliasW LoadLibraryW ExitProcess MoveFileWithProgressW LeaveCriticalSection EnumSystemLocalesW OpenMutexA FileTimeToLocalFileTime SearchPathW GetProcessShutdownParameters FindResourceA FormatMessageW CreateIoCompletionPort GetPrivateProfileStructW CreateFiber InterlockedExchange EnumDateFormatsA FindResourceExA InterlockedIncrement FindActCtxSectionGuid SetConsoleCursorInfo UnregisterWait FoldStringW LocalAlloc GetFileType GetNumberOfConsoleInputEvents GetProfileSectionA SetDefaultCommConfigW SetLastError GetMailslotInfo GetSystemDefaultUILanguage GetFileAttributesA GetSystemWindowsDirectoryA GetAtomNameW GetComputerNameA ReadConsoleInputA EnumTimeFormatsA GetPrivateProfileStructA _hwrite GetConsoleAliasA lstrcatA GetFullPathNameW DebugSetProcessKillOnExit AddAtomA SetCurrentDirectoryW SetCalendarInfoA CopyFileExA HeapAlloc FindNextChangeNotification DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperW

gdi32

GetCharWidthW SelectObject

Sharing