file[.]exe | Triage™

General

Target
file.exe
Size 202KB
Sample220925-l6smaaeca7
SHA256 9c44d9d6a6c85bc1108ae809a75b643080ae20f71b77a300b6423b65ab17c521
MD5 18f5401d2e05d9ba7bc336b9d9084634
SHA1 a7029e5c4967996ba119d1296df8808c9f20a311
SHA512 95c219de759e893ff6afdb144c0ed590119bfbf245bd82baa3a47ce9b08df6fe0f533acc520d694f31f5828053b075ee3c23ee483af61499bd99771d0d6d253e
SSDEEP 3072:M/0yXTsvm5aU+L1QDfbpGVNOXyflIpvoM3Bl6R8Oq/PkIXx:LDUTaNOCdIpvoK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 202KB

file.exe

IMPHASH 7e2698775b4fdd172be2f411b5fc3589
SHA256 9c44d9d6a6c85bc1108ae809a75b643080ae20f71b77a300b6423b65ab17c521
MD5 18f5401d2e05d9ba7bc336b9d9084634
SHA1 a7029e5c4967996ba119d1296df8808c9f20a311
SHA512 95c219de759e893ff6afdb144c0ed590119bfbf245bd82baa3a47ce9b08df6fe0f533acc520d694f31f5828053b075ee3c23ee483af61499bd99771d0d6d253e
SSDEEP 3072:M/0yXTsvm5aU+L1QDfbpGVNOXyflIpvoM3Bl6R8Oq/PkIXx:LDUTaNOCdIpvoK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13943

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA SetThreadContext SetConsoleCtrlHandler GlobalFindAtomW TerminateJobObject lstrcpynW WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxA FormatMessageW GetModuleHandleW GetConsoleAliasW OpenWaitableTimerW LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject LocalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing