file[.]exe | Triage™

General

Target
file.exe
Size 290KB
Sample220925-yh4e4afhf8
SHA256 d96f67753f2b90f2cb90ea40034c7c270d1f819d1bb4a562a19ae2e0e65b3bb0
MD5 b98a60d3374a3e6bbf3bded47908b5fe
SHA1 0e90a586cabd539f5175173d247ac65ac31b4070
SHA512 81be36d7d71625643317b1254489a038d078c56185b250bc422b6e46f7fcf9ef8e29660c3372b860d0f3760f6b64088745c1ac7e8b8d5150d50d8ba93918ca29
SSDEEP 3072:RaS8+ZlbEz5o8S62OxIBkRpqeTcT3b1mE8Lgo3j6N2MMFzTVGuek9BJarL6/Pkuf:j7OxIIge6r1P8LD3j6N25BGuz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 290KB

file.exe

IMPHASH deb56da0b105ce533478166630286cbb
SHA256 d96f67753f2b90f2cb90ea40034c7c270d1f819d1bb4a562a19ae2e0e65b3bb0
MD5 b98a60d3374a3e6bbf3bded47908b5fe
SHA1 0e90a586cabd539f5175173d247ac65ac31b4070
SHA512 81be36d7d71625643317b1254489a038d078c56185b250bc422b6e46f7fcf9ef8e29660c3372b860d0f3760f6b64088745c1ac7e8b8d5150d50d8ba93918ca29
SSDEEP 3072:RaS8+ZlbEz5o8S62OxIBkRpqeTcT3b1mE8Lgo3j6N2MMFzTVGuek9BJarL6/Pkuf:j7OxIIge6r1P8LD3j6N25BGuz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13911

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA GetThreadContext SetConsoleCtrlHandler GlobalFindAtomW TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxA FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing