file[.]exe | Triage™

General

Target
file.exe
Size 200KB
Sample220924-ex384abhdm
SHA256 3579d8b3c35507d8097f9bbb66db0e2b3117f39f8258a6f9103d53cb7fab47d9
MD5 33ff95cd358e83db7d5333f39c5311f9
SHA1 bbf4eac70a253bb899dc10e8a619a28348dd4cf1
SHA512 0bb484dfb230f9a1d1d601f8221415bd10ef46d5945e74e27d0223d36805b848e0335e29534bdbc692e9d687ca2888ab1bc3ff59463a54fc8b16d1791f269ef5
SSDEEP 3072:zwh/3CQMLltiZkTe6H85RxWTNHAJmZ15+cOyGy6uzt6KF5yeBbOH/Pkj4x:zoK/LlTvyIHAJmZ/Ojuzt6Ku
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 200KB

file.exe

IMPHASH 192e7048e108f1ae8d455614dc3235f7
SHA256 3579d8b3c35507d8097f9bbb66db0e2b3117f39f8258a6f9103d53cb7fab47d9
MD5 33ff95cd358e83db7d5333f39c5311f9
SHA1 bbf4eac70a253bb899dc10e8a619a28348dd4cf1
SHA512 0bb484dfb230f9a1d1d601f8221415bd10ef46d5945e74e27d0223d36805b848e0335e29534bdbc692e9d687ca2888ab1bc3ff59463a54fc8b16d1791f269ef5
SSDEEP 3072:zwh/3CQMLltiZkTe6H85RxWTNHAJmZ15+cOyGy6uzt6KF5yeBbOH/Pkj4x:zoK/LlTvyIHAJmZ/Ojuzt6Ku
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14118

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntW InterlockedIncrement SetSystemTimeAdjustment VerSetConditionMask SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoW LocalSize SetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc GetVolumeNameForVolumeMountPointA FatalAppExitA ProcessIdToSessionId GetComputerNameA VirtualLock GetSystemWindowsDirectoryW GetCurrencyFormatA GetTapeParameters LockFile DefineDosDeviceW GetAtomNameW FlushConsoleInputBuffer GetProcessAffinityMask GetCPInfoExA SetThreadContext SetConsoleCtrlHandler GlobalFindAtomW QueryInformationJobObject lstrcpynW WriteConsoleA GetCommandLineA GetBinaryTypeW GetLastError GetCommandLineW GetCalendarInfoW GetConsoleTitleW CreateActCtxA FormatMessageW GetModuleHandleW GetConsoleAliasA OpenWaitableTimerW InterlockedDecrement LoadLibraryW TerminateProcess HeapAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetSystemTimeAdjustment GetOverlappedResult GetPrivateProfileStructW ConvertThreadToFiber EnumDateFormatsA FindActCtxSectionGuid SetConsoleCursorPosition RegisterWaitForSingleObject InterlockedExchange GlobalAlloc GetFileInformationByHandle SetLastError SetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing