file[.]exe | Triage™

General

Target
file.exe
Size 364KB
Sample220919-e7874agcf5
SHA256 c6a15b35a1fc2a1c4f26f903117e71ce5bc21bf0b2a5ebeadd12e7214c8417b8
MD5 1a1e5d900fb4f664b16da2882956bca8
SHA1 79cf4d46f1563e9fbd9ee031f566a5d74fd6c5dc
SHA512 936d811220c6a2e81bb7e55a906c3392e4051aeb2b8eec9c0b9c542ac4eb44dd10eeab1ae2c9d98a126d5f3f32631e6b0acd1394e6ec7b0606a5160dc64e6eed
SSDEEP 6144:tx8BUXLDKiLvG7n8hn+PE99KznabfCDZFdwLRzcfNd0HPjigavwVf:tx8BU3KizG7/Er3fCD+L2f4W
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 364KB

file.exe

IMPHASH 0351985a0f5ea5fc98b7f489728d95c5
SHA256 c6a15b35a1fc2a1c4f26f903117e71ce5bc21bf0b2a5ebeadd12e7214c8417b8
MD5 1a1e5d900fb4f664b16da2882956bca8
SHA1 79cf4d46f1563e9fbd9ee031f566a5d74fd6c5dc
SHA512 936d811220c6a2e81bb7e55a906c3392e4051aeb2b8eec9c0b9c542ac4eb44dd10eeab1ae2c9d98a126d5f3f32631e6b0acd1394e6ec7b0606a5160dc64e6eed
SSDEEP 6144:tx8BUXLDKiLvG7n8hn+PE99KznabfCDZFdwLRzcfNd0HPjigavwVf:tx8BU3KizG7/Er3fCD+L2f4W
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38733

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA UnlockFile InterlockedExchangeAdd OpenWaitableTimerA CreateEventA ReadConsoleInputW WaitNamedPipeA CommConfigDialogW SetSystemTimeAdjustment FindNextFileA EnumResourceTypesA GetModuleFileNameW UpdateResourceW DeleteFileA CopyFileA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW GetShortPathNameA GetPrivateProfileStringA PeekConsoleInputW GlobalGetAtomNameW GetProcAddress LoadLibraryW ReleaseActCtx FindFirstChangeNotificationA WritePrivateProfileStringA EnumResourceNamesW lstrcpynA AddAtomA AllocConsole GetLongPathNameW GetSystemDefaultLCID GetSystemDefaultLangID GetProcessHandleCount GetLastError GlobalAlloc OpenJobObjectW EnterCriticalSection FindResourceExW _hwrite GlobalUnfix GetComputerNameA GetVersionExA SetFileShortNameW GetVolumeNameForVolumeMountPointW GetFileSizeEx GetFileAttributesExW SetComputerNameW GetFileAttributesW GetVolumePathNameA FoldStringW CreateFileA CloseHandle HeapAlloc RtlUnwind MultiByteToWideChar RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle HeapSize FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ClientToScreen

msimg32

AlphaBlend

Sharing