file[.]exe | Triage™

General

Target
file.exe
Size 202KB
Sample220925-nbzs8aeea3
SHA256 aa39655b046e5dff029236ee67d80d3106f2e05f11bd3ee1ebeb41d40321c988
MD5 7d5dcf4c6c5492287548fa0051a277bd
SHA1 582d75c10775f5bfb6e175e1179d0bad2ff3c8e6
SHA512 3a255ff7cd7bcc576858d8f2b6d52f8addc4bde55ee301bff01a6cb07afc8b21670e306306a28470a0530e5a68dc28af2b53a7709fe42830a6fd26ba5a78ec83
SSDEEP 3072:eL5M1HpKj5xaFyIPHl7GGISyuKnWNv8bBXJYfrbO/PkxXx:P8yVgUtKJq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 202KB

file.exe

IMPHASH a7175112c7bc5d5196dfbc902ebc9bcd
SHA256 aa39655b046e5dff029236ee67d80d3106f2e05f11bd3ee1ebeb41d40321c988
MD5 7d5dcf4c6c5492287548fa0051a277bd
SHA1 582d75c10775f5bfb6e175e1179d0bad2ff3c8e6
SHA512 3a255ff7cd7bcc576858d8f2b6d52f8addc4bde55ee301bff01a6cb07afc8b21670e306306a28470a0530e5a68dc28af2b53a7709fe42830a6fd26ba5a78ec83
SSDEEP 3072:eL5M1HpKj5xaFyIPHl7GGISyuKnWNv8bBXJYfrbO/PkxXx:P8yVgUtKJq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13943

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA SetThreadContext SetConsoleCtrlHandler GlobalFindAtomW TerminateJobObject lstrcpynW WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxA FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing