file[.]exe | Triage™

General

Target
file.exe
Size 358KB
Sample220916-m84yrsffa2
SHA256 81c84e6f68c115dcceb202caebf3da740f2b6da10658cbf29fb425706bb6f07b
MD5 568cd26254b7f665fd1cf7efb4c464e7
SHA1 2c18bd938dd701f9cd4e5a252310fa1abff8e6d4
SHA512 68b9a9d1269307fcd950886eee9727bc08fdcf40dfc2a60d68aa6fde2582a44c6932d02b3548d66282a15c4cafd7b2fa112a0ee77f4b5e7008f919707847665c
SSDEEP 6144:L0AEF4C6jb1w+FrqZ/WP+0NzFoasR6E04niga:LthC6jBvFro+PnSRRY4i
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 358KB

file.exe

IMPHASH db4f8dd885859039e0236ac1afc9f55e
SHA256 81c84e6f68c115dcceb202caebf3da740f2b6da10658cbf29fb425706bb6f07b
MD5 568cd26254b7f665fd1cf7efb4c464e7
SHA1 2c18bd938dd701f9cd4e5a252310fa1abff8e6d4
SHA512 68b9a9d1269307fcd950886eee9727bc08fdcf40dfc2a60d68aa6fde2582a44c6932d02b3548d66282a15c4cafd7b2fa112a0ee77f4b5e7008f919707847665c
SSDEEP 6144:L0AEF4C6jb1w+FrqZ/WP+0NzFoasR6E04niga:LthC6jBvFro+PnSRRY4i
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30338

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA UnlockFile InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputA WaitNamedPipeA CommConfigDialogA SetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetModuleFileNameA UpdateResourceW LoadLibraryW DeleteFileW CopyFileW FillConsoleOutputCharacterA WriteConsoleOutputCharacterA GetConsoleAliasesLengthW PeekConsoleInputA GlobalGetAtomNameW GetShortPathNameA GetPrivateProfileStringW GetModuleHandleA GetProcAddress VirtualAlloc ReleaseActCtx GetConsoleAliasW FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesA lstrcpynA AddAtomA FreeConsole GetLongPathNameA GetLastError GetSystemDefaultLCID GetSystemDefaultLangID GlobalAlloc FindNextFileW OpenJobObjectA InitializeCriticalSection FindResourceExA _hwrite GlobalUnfix GetComputerNameA VerifyVersionInfoW SetFileShortNameW GetVolumeNameForVolumeMountPointA GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameW LoadLibraryA CreateFileA CloseHandle RtlUnwind GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetFilePointer Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount ReadFile SetStdHandle LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize

user32

ScreenToClient

gdi32

GetCharWidth32A GetCharacterPlacementA

msimg32

AlphaBlend

Sharing