file[.]exe | Triage™

General

Target
file.exe
Size 289KB
Sample220925-e5c2waeeek
SHA256 020f6c65b609b2b278e00aefccb9b5a54bc940517f79d5f40c026c2d41d1e625
MD5 199765f53361664357f12af595ea0a2c
SHA1 a0f0a746c29a8cc027fab34aa0af0d734cd07589
SHA512 2afdd68aa40be1c1dfb94423ad1bcfe0cf4226ecf53851eca0abd05622af63d859c21328fbbfe544ebb9dea60d2745a88448662c5cc405c1d7ae8dd092f26686
SSDEEP 6144:sLcPPM/FAXCRUiE7cDKe03r9tS1dnI7nB:swPE5UR7cDKe03S1dnITB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 289KB

file.exe

IMPHASH 9bc2d597fd7126e41426db0472ea1363
SHA256 020f6c65b609b2b278e00aefccb9b5a54bc940517f79d5f40c026c2d41d1e625
MD5 199765f53361664357f12af595ea0a2c
SHA1 a0f0a746c29a8cc027fab34aa0af0d734cd07589
SHA512 2afdd68aa40be1c1dfb94423ad1bcfe0cf4226ecf53851eca0abd05622af63d859c21328fbbfe544ebb9dea60d2745a88448662c5cc405c1d7ae8dd092f26686
SSDEEP 6144:sLcPPM/FAXCRUiE7cDKe03r9tS1dnI7nB:swPE5UR7cDKe03S1dnITB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13942

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntW InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc VirtualLock GetProcessAffinityMask GetCPInfoExA SetThreadContext SetConsoleCtrlHandler GlobalFindAtomW QueryInformationJobObject lstrcpynW WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoW GetConsoleTitleW CreateActCtxA FormatMessageW GetModuleHandleW GetConsoleAliasW OpenWaitableTimerW LoadLibraryW TerminateProcess HeapAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject LocalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing