file[.]exe | Triage™

General

Target
file.exe
Size 175KB
Sample220925-2dmtbsgch3
SHA256 d564df4ee82e59d325b33f68ad1147f461ffd388bd10879dbe137afadbd32642
MD5 91a25640512f2b966345a91dd7d75de0
SHA1 419da6da49c4271ec600f21ba37a344424ffd17f
SHA512 3bc7d979a74dff2dcde6ef4bc9c5599d737e60db3166bace072c78850ac537d482b2b50ea1e056cc65f7c05d0cca625c9521fcf62bbd1e0c1469ee0de7aedf09
SSDEEP 3072:jaPrhxCC08z5n2c/Op+0x7Xmfpp6uFWUvHtGB7/eC5x:IB/ODxLmfj1WD/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 175KB

file.exe

IMPHASH 3a7d8752e3d4e978a9fe1fcd2ce3b6a7
SHA256 d564df4ee82e59d325b33f68ad1147f461ffd388bd10879dbe137afadbd32642
MD5 91a25640512f2b966345a91dd7d75de0
SHA1 419da6da49c4271ec600f21ba37a344424ffd17f
SHA512 3bc7d979a74dff2dcde6ef4bc9c5599d737e60db3166bace072c78850ac537d482b2b50ea1e056cc65f7c05d0cca625c9521fcf62bbd1e0c1469ee0de7aedf09
SSDEEP 3072:jaPrhxCC08z5n2c/Op+0x7Xmfpp6uFWUvHtGB7/eC5x:IB/ODxLmfj1WD/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14119

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA GetThreadContext SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxW FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing