file[.]exe | Triage™

General

Target
file.exe
Size 382KB
Sample220918-sy682abdf5
SHA256 8e9cc7dfb5ebc2fa8b4f6e738076bb6cb9830b118c1da38fa42b031c331c2e6b
MD5 cccd96c8b0745588ccf7298e4b82117d
SHA1 f08ca3deadb1f0fecffe8ae7632428678c209225
SHA512 2b6feee3ae500bccd080f5d08940fae642f23e69e46ff61c865adb90d99e45801737977e42370cb14ea6a12d106328668cc6f370112d768f42a28d76dc8a158d
SSDEEP 6144:qutR4LaroQwCBBlWqeJ4vrdI+nynFzrqVy0jvnigabwVf:qxaoQwCB9esr9yn9q9ji
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 382KB

file.exe

IMPHASH 9717430c19d6e87f478481d8dab76e21
SHA256 8e9cc7dfb5ebc2fa8b4f6e738076bb6cb9830b118c1da38fa42b031c331c2e6b
MD5 cccd96c8b0745588ccf7298e4b82117d
SHA1 f08ca3deadb1f0fecffe8ae7632428678c209225
SHA512 2b6feee3ae500bccd080f5d08940fae642f23e69e46ff61c865adb90d99e45801737977e42370cb14ea6a12d106328668cc6f370112d768f42a28d76dc8a158d
SSDEEP 6144:qutR4LaroQwCBBlWqeJ4vrdI+nynFzrqVy0jvnigabwVf:qxaoQwCB9esr9yn9q9ji
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

33284

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeW CommConfigDialogA SetSystemTimeAdjustment FindNextFileA EnumResourceTypesW GetModuleFileNameW UpdateResourceA DeleteFileA CopyFileA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW GetShortPathNameA GetPrivateProfileStringA PeekConsoleInputW GlobalGetAtomNameA LocalAlloc GetProcAddress ReleaseActCtx GetConsoleAliasA FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesW LockFile CommConfigDialogW lstrcpynA AddAtomW AllocConsole GetLongPathNameW GetSystemDefaultLCID GetSystemDefaultLangID GetProcessHandleCount GetLastError OpenJobObjectW EnterCriticalSection FindResourceExA _hwrite GlobalWire GetComputerNameA GetVersionExA SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileSizeEx GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameA FoldStringW CreateFileA CloseHandle HeapAlloc RtlUnwind MultiByteToWideChar GetStartupInfoW LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize

user32

ScreenToClient

msimg32

AlphaBlend

Sharing