file[.]exe | Triage™

General

Target
file.exe
Size 391KB
Sample220917-ccph4achdp
SHA256 aa232b0a580dcc13a01b8920df0146953b8f23a6372cfcfc36828e820a262b6f
MD5 1f73368fcc1a345ae676e3c5a2eac349
SHA1 a30daed68e4d27387dfa95781d7a43beda4a4a3d
SHA512 61cc9394ffc88a35a37eb9d6673c81b7716273a87a8ef3be66ab9b4f9911d0ed1001c5bb087099f8d23ce5b6134e93eb47e40344d0f93c48a9391c29013475fa
SSDEEP 6144:2ZuOLu3L0Yu+fG8chokSLJEQcNn2dQeppSTwJe2XGoLt0NzYCInigabwVf:2Z7a3wD51SLJCVKe26Nqi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 391KB

file.exe

IMPHASH 4a80c3940763f436348583ca7b3aa024
SHA256 aa232b0a580dcc13a01b8920df0146953b8f23a6372cfcfc36828e820a262b6f
MD5 1f73368fcc1a345ae676e3c5a2eac349
SHA1 a30daed68e4d27387dfa95781d7a43beda4a4a3d
SHA512 61cc9394ffc88a35a37eb9d6673c81b7716273a87a8ef3be66ab9b4f9911d0ed1001c5bb087099f8d23ce5b6134e93eb47e40344d0f93c48a9391c29013475fa
SSDEEP 6144:2ZuOLu3L0Yu+fG8chokSLJEQcNn2dQeppSTwJe2XGoLt0NzYCInigabwVf:2Z7a3wD51SLJCVKe26Nqi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38257

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA FoldStringA InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeW CommConfigDialogW SetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetModuleFileNameA UpdateResourceA LoadLibraryW DeleteFileA CopyFileW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasesLengthW PeekConsoleInputW GlobalGetAtomNameA GetShortPathNameW GetPrivateProfileStringW GetProcAddress ReleaseActCtx GetConsoleAliasA FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesW LockFile lstrcpynA AddAtomW AllocConsole GetLongPathNameA GetProcessHandleCount GetLastError GetSystemDefaultLCID GetSystemDefaultLangID FindNextFileW OpenJobObjectA EnterCriticalSection FindResourceExA _hwrite GlobalUnfix GetComputerNameA VerifyVersionInfoW SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameW LocalAlloc LoadLibraryA CreateFileA CloseHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount ReadFile SetStdHandle LCMapStringA LCMapStringW FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ScreenToClient

gdi32

GetCharacterPlacementW

msimg32

AlphaBlend

Sharing