file[.]exe | Triage™

General

Target
file.exe
Size 284KB
Sample220925-ecr1bsdba3
SHA256 e2da3fe6413e3179962df95e4b1053624d04d344a6fc2569802c399034cd7ab5
MD5 1d641364bd0f59de6b2d04e377c43e00
SHA1 a233c753f0e2029aeb51ad2c83caecf659a0dbe8
SHA512 048fec014c7a1b72d8b85b671ee5a1e4a0a4edf19779ff27691409bc83d8606c1439ab641eb4ad12643c7eaf64042a3e353d97e8e26a59b8bf061e2b95b52965
SSDEEP 3072:vLOGALx3IIfSN5HbPjhN2jUhZg5k9zMllW2BiC0xcnJWeVta28mVyRwBZU/PkkXx:kLxjf4bF0jUbgmZu9iC06Jbm28mVy
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 284KB

file.exe

IMPHASH 9bc2d597fd7126e41426db0472ea1363
SHA256 e2da3fe6413e3179962df95e4b1053624d04d344a6fc2569802c399034cd7ab5
MD5 1d641364bd0f59de6b2d04e377c43e00
SHA1 a233c753f0e2029aeb51ad2c83caecf659a0dbe8
SHA512 048fec014c7a1b72d8b85b671ee5a1e4a0a4edf19779ff27691409bc83d8606c1439ab641eb4ad12643c7eaf64042a3e353d97e8e26a59b8bf061e2b95b52965
SSDEEP 3072:vLOGALx3IIfSN5HbPjhN2jUhZg5k9zMllW2BiC0xcnJWeVta28mVyRwBZU/PkkXx:kLxjf4bF0jUbgmZu9iC06Jbm28mVy
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13942

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntW InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc VirtualLock GetProcessAffinityMask GetCPInfoExA SetThreadContext SetConsoleCtrlHandler GlobalFindAtomW QueryInformationJobObject lstrcpynW WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoW GetConsoleTitleW CreateActCtxA FormatMessageW GetModuleHandleW GetConsoleAliasW OpenWaitableTimerW LoadLibraryW TerminateProcess HeapAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject LocalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing