file[.]exe | Triage™

General

Target
file.exe
Size 196KB
Sample220924-va38ksbfd3
SHA256 5e62ea2fb73821c5c796b307d3326fcf55b312296631f7f5bd2cea6e0d5b0e44
MD5 e8395a934f440ccafe47db6cafb332fa
SHA1 2155a0002a092236fa9070153afe57023b711c9c
SHA512 0621bdc3243620dcb3ed349f80ce9d8dd131df8423424e69838e014e032c00d58f365e6b3f450351e3864be3ef4342a88cd7d73bf792f77d7ba39ac9274da873
SSDEEP 3072:hrFavLYM8UqA55xy2pK/W0tXIhE3gS7yCBZqGCe/Pkk4x:SL6Ud0PtYhER7yX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 196KB

file.exe

IMPHASH 17ab283f13d2cdb5bbdb03880344f5f8
SHA256 5e62ea2fb73821c5c796b307d3326fcf55b312296631f7f5bd2cea6e0d5b0e44
MD5 e8395a934f440ccafe47db6cafb332fa
SHA1 2155a0002a092236fa9070153afe57023b711c9c
SHA512 0621bdc3243620dcb3ed349f80ce9d8dd131df8423424e69838e014e032c00d58f365e6b3f450351e3864be3ef4342a88cd7d73bf792f77d7ba39ac9274da873
SSDEEP 3072:hrFavLYM8UqA55xy2pK/W0tXIhE3gS7yCBZqGCe/Pkk4x:SL6Ud0PtYhER7yX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13942

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntW InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc VirtualLock GetProcessAffinityMask GetCPInfoExA SetThreadContext SetConsoleCtrlHandler GlobalFindAtomW QueryInformationJobObject lstrcpynW WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoW GetConsoleTitleW CreateActCtxA FormatMessageW GetModuleHandleW GetConsoleAliasA OpenWaitableTimerW LoadLibraryW TerminateProcess HeapAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructW ConvertThreadToFiber EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject LocalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing