file[.]exe | Triage™

General

Target
file.exe
Size 201KB
Sample220925-lnrx2aebe6
SHA256 94432882999f535290ab9eae4c84c23ad4ba3e8ab4afdf6f98da2b01399c8fcd
MD5 f523fb74158b99e3201d60216584b414
SHA1 7764aa3dd03e570da23c2e3dab896aeefa852f18
SHA512 0307f20c0d1ec0d7a7cb20bd3bba2aff32b256ee6bfbe7f7ecd094ceee44e334a2668af990cc89f8f08b0f7943986aa93ccc29d4527db8abe090859ccf848488
SSDEEP 3072:fCGRLPVcm5Jtb8tM9Wf4jnjDOoLRBIG/PkIXx:zjYGWfSjDOl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 201KB

file.exe

IMPHASH 7e2698775b4fdd172be2f411b5fc3589
SHA256 94432882999f535290ab9eae4c84c23ad4ba3e8ab4afdf6f98da2b01399c8fcd
MD5 f523fb74158b99e3201d60216584b414
SHA1 7764aa3dd03e570da23c2e3dab896aeefa852f18
SHA512 0307f20c0d1ec0d7a7cb20bd3bba2aff32b256ee6bfbe7f7ecd094ceee44e334a2668af990cc89f8f08b0f7943986aa93ccc29d4527db8abe090859ccf848488
SSDEEP 3072:fCGRLPVcm5Jtb8tM9Wf4jnjDOoLRBIG/PkIXx:zjYGWfSjDOl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13943

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA SetThreadContext SetConsoleCtrlHandler GlobalFindAtomW TerminateJobObject lstrcpynW WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxA FormatMessageW GetModuleHandleW GetConsoleAliasW OpenWaitableTimerW LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject LocalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing