file[.]exe | Triage™

General

Target
file.exe
Size 284KB
Sample220924-s5w2msbef2
SHA256 d3b573beaa874b2eb5ffc897796ebaee26bbdd64800348492e0b0f587cb84b0d
MD5 2df5f63d6ebb4180785f654685d98b32
SHA1 24752fe0b22befc81e6f47fa5ab093057c998ba0
SHA512 999225655aa376b924361760c9ac503312c602de4e129b68034b8b5249cb9595cea49714f38dee76d66dc2446143815431e7a5c0f1778ec250ccc8cfc494db6a
SSDEEP 3072:WvSmXLg/Ch8rb5LKBvtIC+K937KwRDdO+nJPRB6MAW/p66w1UTbv3HWVtr/3zIFX:QXL3h8VKBvt6WOkpbnJPRFD/nvb/WVt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 284KB

file.exe

IMPHASH 4c94ed4da61ca6c17f4c2408ae1d80b8
SHA256 d3b573beaa874b2eb5ffc897796ebaee26bbdd64800348492e0b0f587cb84b0d
MD5 2df5f63d6ebb4180785f654685d98b32
SHA1 24752fe0b22befc81e6f47fa5ab093057c998ba0
SHA512 999225655aa376b924361760c9ac503312c602de4e129b68034b8b5249cb9595cea49714f38dee76d66dc2446143815431e7a5c0f1778ec250ccc8cfc494db6a
SSDEEP 3072:WvSmXLg/Ch8rb5LKBvtIC+K937KwRDdO+nJPRB6MAW/p66w1UTbv3HWVtr/3zIFX:QXL3h8VKBvt6WOkpbnJPRFD/nvb/WVt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13958

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntW InterlockedIncrement GetSystemTimeAdjustment VerSetConditionMask SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoW LocalSize SetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc VirtualLock GetProcessAffinityMask GetCPInfoExA SetThreadContext SetConsoleCtrlHandler GlobalFindAtomW QueryInformationJobObject lstrcpynW WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoW GetConsoleTitleW CreateActCtxA FormatMessageW GetModuleHandleW GetConsoleAliasA OpenWaitableTimerW InterlockedDecrement LoadLibraryW TerminateProcess HeapAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructW ConvertThreadToFiber EnumDateFormatsA FindActCtxSectionGuid SetConsoleCursorPosition RegisterWaitForSingleObject InterlockedExchange GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing