file[.]exe | Triage™

General

Target
file.exe
Size 176KB
Sample220925-259geagdf5
SHA256 1d93a0ed3ada10f0c36024e54df1dd9fb39aca60bde33ad4d4083a97e0ffbd0c
MD5 a5b766226b5cdf1f103343d4441e731f
SHA1 d45fcec6e97efeba58f1834f42b04282a0ea03de
SHA512 f0cf5b9840523def4311922130337cbac305c75627b27509f13668253739e7b767fa4958c14d3d91c318f5aa70abc1ff37fb1c2183c3960600bedb6f406da3a0
SSDEEP 3072:JZMoSzht18z5L+2dJzIcVCjG4rGRHOP/y4RnFB8HkCt5x:iAd+VLrGZOnxW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 176KB

file.exe

IMPHASH 3a7d8752e3d4e978a9fe1fcd2ce3b6a7
SHA256 1d93a0ed3ada10f0c36024e54df1dd9fb39aca60bde33ad4d4083a97e0ffbd0c
MD5 a5b766226b5cdf1f103343d4441e731f
SHA1 d45fcec6e97efeba58f1834f42b04282a0ea03de
SHA512 f0cf5b9840523def4311922130337cbac305c75627b27509f13668253739e7b767fa4958c14d3d91c318f5aa70abc1ff37fb1c2183c3960600bedb6f406da3a0
SSDEEP 3072:JZMoSzht18z5L+2dJzIcVCjG4rGRHOP/y4RnFB8HkCt5x:iAd+VLrGZOnxW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14119

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA GetThreadContext SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxW FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing