file[.]exe | Triage™

General

Target
file.exe
Size 290KB
Sample220925-k2qrfseag3
SHA256 9da5b3814d6c27436505973bb864a80c081cbf6b62d0bef51b933896bd8590e9
MD5 77e8a34e1fb3db6562754d1e11d48213
SHA1 e3f6090b70500c9e7d0d5055a7890b5e12342f91
SHA512 e6d1ca87d4ab0790c34054045f3006ea70a0e07e98fe257471b98921639a810db48a055f537916f20e0e09e3915e94f0a5a3853d6ea87b93e75a8a8a66221e1f
SSDEEP 6144:hc+nTbrP3Oef/n8DsNq1AE2k65Oc/W+NC33TTH:h1rPbHn1Nq8kjw83
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 290KB

file.exe

IMPHASH 7e2698775b4fdd172be2f411b5fc3589
SHA256 9da5b3814d6c27436505973bb864a80c081cbf6b62d0bef51b933896bd8590e9
MD5 77e8a34e1fb3db6562754d1e11d48213
SHA1 e3f6090b70500c9e7d0d5055a7890b5e12342f91
SHA512 e6d1ca87d4ab0790c34054045f3006ea70a0e07e98fe257471b98921639a810db48a055f537916f20e0e09e3915e94f0a5a3853d6ea87b93e75a8a8a66221e1f
SSDEEP 6144:hc+nTbrP3Oef/n8DsNq1AE2k65Oc/W+NC33TTH:h1rPbHn1Nq8kjw83
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13943

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA SetThreadContext SetConsoleCtrlHandler GlobalFindAtomW TerminateJobObject lstrcpynW WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxA FormatMessageW GetModuleHandleW GetConsoleAliasW OpenWaitableTimerW LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject LocalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing