file[.]exe | Triage™

General

Target
file.exe
Size 390KB
Sample220917-c499wachgl
SHA256 854d8d8e815dda1dd77e3c1080f6a2ad529c8cef323d8bd4e773cef19b6a44ae
MD5 d35f49c0ed359bb544c1411ec498ccb1
SHA1 5cbe29d550812ebb4a681702abae2142e9b2d1f8
SHA512 9507395a5e05e4356ac6e69828fc7e935166f2b82b43e5c495d44b1a122583412b2c85f7a39c9701d3222c428dacb4e23fa96a70f7ae88bc106d21367c297768
SSDEEP 6144:01fXLXalPmL4jmQF4Foa3YzKlxURxPCALqYDo20tFhXJwnigabwVf:CPba0435uxUzPCAjwt3Jwi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 390KB

file.exe

IMPHASH 4a80c3940763f436348583ca7b3aa024
SHA256 854d8d8e815dda1dd77e3c1080f6a2ad529c8cef323d8bd4e773cef19b6a44ae
MD5 d35f49c0ed359bb544c1411ec498ccb1
SHA1 5cbe29d550812ebb4a681702abae2142e9b2d1f8
SHA512 9507395a5e05e4356ac6e69828fc7e935166f2b82b43e5c495d44b1a122583412b2c85f7a39c9701d3222c428dacb4e23fa96a70f7ae88bc106d21367c297768
SSDEEP 6144:01fXLXalPmL4jmQF4Foa3YzKlxURxPCALqYDo20tFhXJwnigabwVf:CPba0435uxUzPCAjwt3Jwi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38273

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA FoldStringA InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeW CommConfigDialogW SetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetModuleFileNameA UpdateResourceA LoadLibraryW DeleteFileA CopyFileW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasesLengthW PeekConsoleInputW GlobalGetAtomNameA GetShortPathNameW GetPrivateProfileStringW GetProcAddress ReleaseActCtx GetConsoleAliasA FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesW LockFile lstrcpynA AddAtomW AllocConsole GetLongPathNameA GetProcessHandleCount GetLastError GetSystemDefaultLCID GetSystemDefaultLangID FindNextFileW OpenJobObjectA EnterCriticalSection FindResourceExA _hwrite GlobalUnfix GetComputerNameA VerifyVersionInfoW SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameW LocalAlloc LoadLibraryA CreateFileA CloseHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount ReadFile SetStdHandle LCMapStringA LCMapStringW FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ScreenToClient

gdi32

GetCharacterPlacementW

msimg32

AlphaBlend

Sharing