file[.]exe | Triage™

General

Target
file.exe
Size 290KB
Sample220925-w1f2eagher
SHA256 76570c3512e1e913e5038e6f80896703f842ce5c5a412a24fbda7e342c2fe155
MD5 e691ef78f8984b6c59d9b9bd69d1807b
SHA1 60b54a2f243caa82ee50e912c2cd325153e3ff9a
SHA512 121b7c13deb3a6bd34e0421330650983160dd17b12aa705ed625168dc8f67da85e4d9afbc09bcce9e57bfece0e57654a5f96a24071791af57e3f62b3680f1bb1
SSDEEP 3072:zmFqobuWLIEz5K4zBT56QFlJEy4pH3en2feID98B4WtRIwNBSOpKtUJ3YdKBydYb:ELi4zB1llJEy4pO2mfSmIwvSOUKYdD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 290KB

file.exe

IMPHASH deb56da0b105ce533478166630286cbb
SHA256 76570c3512e1e913e5038e6f80896703f842ce5c5a412a24fbda7e342c2fe155
MD5 e691ef78f8984b6c59d9b9bd69d1807b
SHA1 60b54a2f243caa82ee50e912c2cd325153e3ff9a
SHA512 121b7c13deb3a6bd34e0421330650983160dd17b12aa705ed625168dc8f67da85e4d9afbc09bcce9e57bfece0e57654a5f96a24071791af57e3f62b3680f1bb1
SSDEEP 3072:zmFqobuWLIEz5K4zBT56QFlJEy4pH3en2feID98B4WtRIwNBSOpKtUJ3YdKBydYb:ELi4zB1llJEy4pO2mfSmIwvSOUKYdD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13911

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA GetThreadContext SetConsoleCtrlHandler GlobalFindAtomW TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxA FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing