file[.]exe | Triage™

General

Target
file.exe
Size 392KB
Sample220916-tf7yaagbe7
SHA256 8300b7608c08c7ebba60503bea52a17f3d8e87b370a2c49bd087a70ef771ec0a
MD5 34c6ccb027f9b32f3f5694132d6bb58c
SHA1 e3ef3222e750d05cbc64b57dacf4c22ea3cb2e90
SHA512 36cc441b78895d28092542b441e59e014889b658d3cafa76baa0eab286dea4cbcd252f9be8050c83e782e17a5401d8e0c689d99d56b206bfef424f469d320aca
SSDEEP 6144:c5W/IBghG3eSIMviYlRKdXF6KQ0YTq2vUGF0DJnigabwVf:cc/IEG3eSpv7IX7sUvDJi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 392KB

file.exe

IMPHASH 34b388503bcaefb861346bf8902da833
SHA256 8300b7608c08c7ebba60503bea52a17f3d8e87b370a2c49bd087a70ef771ec0a
MD5 34c6ccb027f9b32f3f5694132d6bb58c
SHA1 e3ef3222e750d05cbc64b57dacf4c22ea3cb2e90
SHA512 36cc441b78895d28092542b441e59e014889b658d3cafa76baa0eab286dea4cbcd252f9be8050c83e782e17a5401d8e0c689d99d56b206bfef424f469d320aca
SSDEEP 6144:c5W/IBghG3eSIMviYlRKdXF6KQ0YTq2vUGF0DJnigabwVf:cc/IEG3eSpv7IX7sUvDJi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37458

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputA WaitNamedPipeW CommConfigDialogA SetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetModuleFileNameA UpdateResourceW LoadLibraryW DeleteFileW CopyFileW FillConsoleOutputCharacterA WriteConsoleOutputCharacterA GetConsoleAliasesLengthW PeekConsoleInputA GlobalGetAtomNameW GetShortPathNameA GetPrivateProfileStringW GetModuleHandleA VirtualAlloc ReleaseActCtx GetConsoleAliasW FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesW LockFile lstrcpynA AddAtomA AllocConsole GetLongPathNameA GetLastError GetSystemDefaultLCID GetSystemDefaultLangID GlobalAlloc GetComputerNameW FindNextFileW OpenJobObjectA InitializeCriticalSection FindResourceExA _hwrite GlobalUnfix GetComputerNameA VerifyVersionInfoW SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameW GetProcAddress LoadLibraryA CreateFileA CloseHandle InterlockedIncrement InterlockedDecrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType SetFilePointer ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount ReadFile SetStdHandle LCMapStringA LCMapStringW FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ScreenToClient

gdi32

GetCharWidth32A GetCharacterPlacementA

msimg32

AlphaBlend

Sharing