file[.]exe | Triage™

General

Target
file.exe
Size 370KB
Sample220919-nc69paech2
SHA256 0821eb16ab4a47e8ca876c05dbccab3af8fce9e592b4394f0282a2ee26564945
MD5 13694f6be25e84ba63827cc84fe7f5b1
SHA1 de66072919e2f3341a73e55ad0a7edc1527cb1e2
SHA512 2e2b5f8040ac87efac3f03ccba3bd7969fa7de976d5cf2a6d06918459ec6b3af8636d596b3ca2d51f4fe47f6843cf499ea4ad49f37649cb28c1f2d9c86f4f81a
SSDEEP 6144:9JkePALPb5apEn4ksE206GKp0sBY5itiP01Y2igavwVfB:9Jke4Lb5ap2seKp0s4i31S
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 370KB

file.exe

IMPHASH 4d5d415378610a17ab17ccfb334947af
SHA256 0821eb16ab4a47e8ca876c05dbccab3af8fce9e592b4394f0282a2ee26564945
MD5 13694f6be25e84ba63827cc84fe7f5b1
SHA1 de66072919e2f3341a73e55ad0a7edc1527cb1e2
SHA512 2e2b5f8040ac87efac3f03ccba3bd7969fa7de976d5cf2a6d06918459ec6b3af8636d596b3ca2d51f4fe47f6843cf499ea4ad49f37649cb28c1f2d9c86f4f81a
SSDEEP 6144:9JkePALPb5apEn4ksE206GKp0sBY5itiP01Y2igavwVfB:9Jke4Lb5ap2seKp0s4i31S
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38701

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA UnlockFile InterlockedExchangeAdd OpenWaitableTimerA CreateEventA ReadConsoleInputW WaitNamedPipeA CommConfigDialogW GetSystemTimeAdjustment FindNextFileA EnumResourceTypesA GetModuleFileNameW UpdateResourceW DeleteFileA CopyFileA VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasW GetShortPathNameA GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameW GetProcAddress ReleaseActCtx FindFirstChangeNotificationA WritePrivateProfileStringA EnumResourceNamesW lstrcpynA AddAtomA AllocConsole GetLongPathNameW GetSystemDefaultLCID GetSystemDefaultLangID GetProcessHandleCount GetLastError GlobalAlloc FindNextFileW OpenJobObjectW EnterCriticalSection FindResourceExW _hwrite GlobalUnfix GetComputerNameW GetVersionExA SetFileShortNameW GetVolumeNameForVolumeMountPointW GetFileSizeEx GetFileAttributesExW SetComputerNameW GetFileAttributesW GetVolumePathNameA FoldStringW CreateFileA CloseHandle HeapAlloc RtlUnwind MultiByteToWideChar RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle HeapSize FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ClientToScreen

msimg32

AlphaBlend

Sharing