file[.]exe | Triage™

General

Target
file.exe
Size 146KB
Sample220920-acmcmafcej
SHA256 3e3faab7213386cdb63663ddad9856c1cb0ddd39865e7f0381dbcf927ca456cc
MD5 3fb60d7763471f34169a733ddfe6bc21
SHA1 9990ad63e7b7ac22ad696fa9dc65f0536efdc528
SHA512 717c5a1423f3f0bd010fc0b66b8260dae7ff5da1e6c3d03879b887c83a073058b3daf7842e83190b470e255d81339a2e9b3c1d115ea5525f6ab271684742e3b4
SSDEEP 3072:HoEaL38No549dPcqTDnkYxJwXQ7TaW0sahRFh/vkgBmkdM5J/ZCkjx:MLMN59dUqHlJR3a3FhR3/aUk
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 146KB

file.exe

IMPHASH 44ee9c2cb295464721e1f35a7b8dbf2f
SHA256 3e3faab7213386cdb63663ddad9856c1cb0ddd39865e7f0381dbcf927ca456cc
MD5 3fb60d7763471f34169a733ddfe6bc21
SHA1 9990ad63e7b7ac22ad696fa9dc65f0536efdc528
SHA512 717c5a1423f3f0bd010fc0b66b8260dae7ff5da1e6c3d03879b887c83a073058b3daf7842e83190b470e255d81339a2e9b3c1d115ea5525f6ab271684742e3b4
SSDEEP 3072:HoEaL38No549dPcqTDnkYxJwXQ7TaW0sahRFh/vkgBmkdM5J/ZCkjx:MLMN59dUqHlJR3a3FhR3/aUk
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13014

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoW LocalFree GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExW GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA ExitProcess HeapAlloc LeaveCriticalSection EnumSystemLocalesW OpenMutexW FileTimeToLocalFileTime GetComputerNameExA GetProcessShutdownParameters FindResourceW FormatMessageW GetOverlappedResult CreateFiber EnumDateFormatsA GetNumberOfConsoleInputEvents VirtualUnlock GetTapeParameters GetPrivateProfileStructW GetAtomNameA SetConsoleScreenBufferSize SetProcessAffinityMask GetCPInfoExA SetThreadContext lstrlenA SetConsoleCtrlHandler CopyFileExA SetInformationJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError SearchPathW GetCommandLineA InterlockedExchange VerifyVersionInfoA GetCalendarInfoW GetConsoleTitleA CreateActCtxA FormatMessageA InitializeCriticalSection LoadLibraryA GetConsoleAliasW LoadLibraryW InterlockedIncrement FindActCtxSectionGuid SetConsoleCursorInfo UnregisterWait LocalAlloc GetFileType SetDefaultCommConfigW SetLastError GetMailslotInfo GetSystemDefaultUILanguage GetFileAttributesA GetComputerNameA EnumTimeFormatsA CreateIoCompletionPort DebugSetProcessKillOnExit AddAtomA SetCurrentDirectoryA SetCalendarInfoA GlobalGetAtomNameW FindNextChangeNotification GetStartupInfoW SetUnhandledExceptionFilter Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection VirtualAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

gdi32

SelectObject

Sharing