file[.]exe | Triage™

General

Target
file.exe
Size 357KB
Sample220916-kbvbysfbd5
SHA256 75969ec79b24f7cd86c4d37c523854e964d5e839704d5bb6fc0212b0b0556b35
MD5 d062e68b75c40ffc753c1d429d1f116c
SHA1 76a44ec789c35ce9a915df3b1aee99c7745fdf6c
SHA512 48eb44abc309ad31b78abe15c032b9119f234379fd3af129692b81263428302d82b31ad0ee9db7283a385b98b0059dda47347b9ff6c7007b6cdd35345491865f
SSDEEP 6144:vt6Af8ngeEnuxSvjtaHE+DM3Fd/InqD0iOvniga:vpfWge0zjtaHDDM33IZi6i
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 357KB

file.exe

IMPHASH f9eb892dd5cb3d269e55740b3beddcee
SHA256 75969ec79b24f7cd86c4d37c523854e964d5e839704d5bb6fc0212b0b0556b35
MD5 d062e68b75c40ffc753c1d429d1f116c
SHA1 76a44ec789c35ce9a915df3b1aee99c7745fdf6c
SHA512 48eb44abc309ad31b78abe15c032b9119f234379fd3af129692b81263428302d82b31ad0ee9db7283a385b98b0059dda47347b9ff6c7007b6cdd35345491865f
SSDEEP 6144:vt6Af8ngeEnuxSvjtaHE+DM3Fd/InqD0iOvniga:vpfWge0zjtaHDDM33IZi6i
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30370

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA FoldStringA UnlockFile InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputA WaitNamedPipeA CommConfigDialogA SetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetModuleFileNameA UpdateResourceW LoadLibraryW DeleteFileW CopyFileW FillConsoleOutputCharacterA WriteConsoleOutputCharacterA GetConsoleAliasesLengthW PeekConsoleInputA GlobalGetAtomNameW GetShortPathNameA GetPrivateProfileStringW VirtualAlloc ReleaseActCtx GetConsoleAliasW FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesA lstrcpynA AddAtomA FreeConsole GetLongPathNameA GetLastError GetSystemDefaultLCID GetSystemDefaultLangID GlobalAlloc FindNextFileW GetPriorityClass OpenJobObjectA InitializeCriticalSection FindResourceExA SetConsoleMode _hwrite GlobalUnfix GetComputerNameA VerifyVersionInfoW SetFileShortNameW GetVolumeNameForVolumeMountPointA GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameW GetProcAddress LoadLibraryA CreateFileA CloseHandle RtlUnwind GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetFilePointer Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount ReadFile SetStdHandle LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize

user32

ScreenToClient

gdi32

GetCharWidth32A GetCharacterPlacementA

msimg32

AlphaBlend

Sharing