file[.]exe | Triage™

General

Target
file.exe
Size 187KB
Sample220923-2fdcnsaba2
SHA256 898492d1dc82fde84e55317f06e8014b52cbdd0f824327bde7161a6799f3486a
MD5 182c1c57c6f485d697f52507d4c04173
SHA1 81f4216319afdd5a19f1b6ec6efd51ed6b59b825
SHA512 f7e9388d9f4fdfc1c6969f9a8dad80a85e882575363faf26ac6c971235d623486eb80aa039a55e5296043f290dd1f3e665966eb8682d94e20e78ea800315afd4
SSDEEP 3072:zYwQs+L0GsOw5nOKe1uSl214mOpRORI9pzGkBf0HJaC2/Pk44x:yLgOG8uSl2qm4GIPzGPpa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 187KB

file.exe

IMPHASH 30398207b07906bcbb9d1de6bf7262f3
SHA256 898492d1dc82fde84e55317f06e8014b52cbdd0f824327bde7161a6799f3486a
MD5 182c1c57c6f485d697f52507d4c04173
SHA1 81f4216319afdd5a19f1b6ec6efd51ed6b59b825
SHA512 f7e9388d9f4fdfc1c6969f9a8dad80a85e882575363faf26ac6c971235d623486eb80aa039a55e5296043f290dd1f3e665966eb8682d94e20e78ea800315afd4
SSDEEP 3072:zYwQs+L0GsOw5nOKe1uSl214mOpRORI9pzGkBf0HJaC2/Pk44x:yLgOG8uSl2qm4GIPzGPpa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14006

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntW InterlockedIncrement SetSystemTimeAdjustment VerSetConditionMask SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoW LocalSize SetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualQuery GetVolumeNameForVolumeMountPointA FatalAppExitA ProcessIdToSessionId GetComputerNameA VirtualLock GetSystemWindowsDirectoryW GetCurrencyFormatA GetTapeParameters LockFile DefineDosDeviceW GetAtomNameW FlushConsoleInputBuffer GetProcessAffinityMask GetCPInfoExA SetThreadContext lstrlenW SetConsoleCtrlHandler GlobalFindAtomW QueryInformationJobObject lstrcpynA WriteConsoleA GetCommandLineA GetBinaryTypeW GetLastError GetCommandLineW GetCalendarInfoW GetConsoleTitleW CreateActCtxA FormatMessageW GetModuleHandleW GetConsoleAliasA InterlockedDecrement LoadLibraryW TerminateProcess HeapAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetSystemTimeAdjustment GetOverlappedResult GetPrivateProfileStructW ConvertThreadToFiber EnumDateFormatsA FindActCtxSectionGuid SetConsoleCursorPosition RegisterWaitForSingleObject InterlockedExchange GlobalAlloc GetFileInformationByHandle SetLastError SetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing