file[.]exe | Triage™

General

Target
file.exe
Size 289KB
Sample220925-myzajaffbl
SHA256 bc9320e353015db4fe2f27374b3a984d3124f2ef0fe09999c41a239f81eed33d
MD5 c8083eef5a407cf0f409aa626d92b4fa
SHA1 fcd2be5f356dfbc8d02f5419f40bef30db78299c
SHA512 d61f3eeb2a794ef83df34a4a5756d61f861667ef667d1d3002335ef408527a83224e2e8255dc2fc4efece16c7d1568ac92b74e89b6ca2a716692569406d605d1
SSDEEP 3072:bl+u6AIVcm55CTBVX6kfHvDerDO9bdVoS6RMSYXO2VZDGq0LAWUH2HYB3B//PkIB:hkxCNt60PyrDQb//6eZXDGq0LNUE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 289KB

file.exe

IMPHASH 7e2698775b4fdd172be2f411b5fc3589
SHA256 bc9320e353015db4fe2f27374b3a984d3124f2ef0fe09999c41a239f81eed33d
MD5 c8083eef5a407cf0f409aa626d92b4fa
SHA1 fcd2be5f356dfbc8d02f5419f40bef30db78299c
SHA512 d61f3eeb2a794ef83df34a4a5756d61f861667ef667d1d3002335ef408527a83224e2e8255dc2fc4efece16c7d1568ac92b74e89b6ca2a716692569406d605d1
SSDEEP 3072:bl+u6AIVcm55CTBVX6kfHvDerDO9bdVoS6RMSYXO2VZDGq0LAWUH2HYB3B//PkIB:hkxCNt60PyrDQb//6eZXDGq0LNUE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13943

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA SetThreadContext SetConsoleCtrlHandler GlobalFindAtomW TerminateJobObject lstrcpynW WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxA FormatMessageW GetModuleHandleW GetConsoleAliasW OpenWaitableTimerW LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject LocalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing