file[.]exe | Triage™

General

Target
file.exe
Size 301KB
Sample220916-rdvh3abffn
SHA256 ec7d6ea18f9fb861bd92b93f0d88b5d4c68dbcf5dddb638f358eac2a484996f5
MD5 849841d775656429b46ca7852448d8ff
SHA1 c35e47a2c0ea120a0dfa4153e1d84130402c62c3
SHA512 ad1f75fafad42699644d482f5679f39cbf3b3d8b5a6dcaafaf7103813cf11f02b3142a29e4e968b9ee1ca3677d81d5367bc2ef0756decc32967364a49693d2e7
SSDEEP 6144:U/Rk14Lk/FAfZ7H2/0rneKtNnigabwVf:UJkbAZ7H5bRi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 301KB

file.exe

IMPHASH 0b6c6744c87891f47924ea05001f3809
SHA256 ec7d6ea18f9fb861bd92b93f0d88b5d4c68dbcf5dddb638f358eac2a484996f5
MD5 849841d775656429b46ca7852448d8ff
SHA1 c35e47a2c0ea120a0dfa4153e1d84130402c62c3
SHA512 ad1f75fafad42699644d482f5679f39cbf3b3d8b5a6dcaafaf7103813cf11f02b3142a29e4e968b9ee1ca3677d81d5367bc2ef0756decc32967364a49693d2e7
SSDEEP 6144:U/Rk14Lk/FAfZ7H2/0rneKtNnigabwVf:UJkbAZ7H5bRi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37458

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputA WaitNamedPipeA CommConfigDialogA SetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetModuleFileNameA UpdateResourceW LoadLibraryW DeleteFileW CopyFileW FillConsoleOutputCharacterA WriteConsoleOutputCharacterA GetConsoleAliasesLengthW PeekConsoleInputA GlobalGetAtomNameW GetShortPathNameA GetPrivateProfileStringW GetModuleHandleA VirtualAlloc ReleaseActCtx GetConsoleAliasW FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesA LockFile lstrcpynA AddAtomA AllocConsole GetLongPathNameA GetLastError GetSystemDefaultLCID GetSystemDefaultLangID GlobalAlloc GetComputerNameW FindNextFileW OpenJobObjectA InitializeCriticalSection FindResourceExA _hwrite GlobalUnfix GetComputerNameA VerifyVersionInfoW SetFileShortNameW GetVolumeNameForVolumeMountPointA GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameW GetProcAddress LoadLibraryA CreateFileA CloseHandle InterlockedIncrement InterlockedDecrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType SetFilePointer ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount ReadFile SetStdHandle LCMapStringA LCMapStringW FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ScreenToClient

gdi32

GetCharWidth32A GetCharacterPlacementA

msimg32

AlphaBlend

Sharing