file[.]exe | Triage™

General

Target
file.exe
Size 175KB
Sample220925-yx89wshbfm
SHA256 55fd3e0f9b6d100b718f0dcd7769b437e02eefb348581c3334524bd2f5beeee0
MD5 91f6588e4dceef88a1bfeb1048e72f06
SHA1 c84fef2e0139bd8f53d4e4dde55fcbcb2215356f
SHA512 a625a320c69e2b7ec0a1b40d1662899ed29c224e30a4eab57c0f86c8fa1ea520b287e485810ffc027eac2b07f9dd3d4818dd7119e00026665921712e26f2792b
SSDEEP 3072:HliojXGPzz5Y5HsYEdlpin8klDCOzmagZBPJSLyP5x:am5HsYEryblDXz3L
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 175KB

file.exe

IMPHASH 83189d8f3c5dfddec9508c335eeefdae
SHA256 55fd3e0f9b6d100b718f0dcd7769b437e02eefb348581c3334524bd2f5beeee0
MD5 91f6588e4dceef88a1bfeb1048e72f06
SHA1 c84fef2e0139bd8f53d4e4dde55fcbcb2215356f
SHA512 a625a320c69e2b7ec0a1b40d1662899ed29c224e30a4eab57c0f86c8fa1ea520b287e485810ffc027eac2b07f9dd3d4818dd7119e00026665921712e26f2792b
SSDEEP 3072:HliojXGPzz5Y5HsYEdlpin8klDCOzmagZBPJSLyP5x:am5HsYEryblDXz3L
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13911

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA GetThreadContext SetConsoleCtrlHandler GlobalFindAtomW TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxW FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing