file[.]exe | Triage™

General

Target
file.exe
Size 176KB
Sample220925-zceefsgaf2
SHA256 6c17fcc4f12dd7710883b8d3d8f1e08f9140468b0ead1387f97a0f8d441af422
MD5 a011caf44b28dd658a041363ddee6443
SHA1 914879a573abd13ec2467b60d578194500b486c9
SHA512 e6c76d7efae0df4f21008bcefcfa67f24ed4f15f81147ee272324191f9a20a55ffc7dea6c4666d1fbd71e740a83665dfbe8d3cd51f822c17f76488f8280733d8
SSDEEP 3072:43FBc6qHzz5TW41RVDkzPgSqCBZBq4Prc35x:JpW4hSPw4G4P
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 176KB

file.exe

IMPHASH 83189d8f3c5dfddec9508c335eeefdae
SHA256 6c17fcc4f12dd7710883b8d3d8f1e08f9140468b0ead1387f97a0f8d441af422
MD5 a011caf44b28dd658a041363ddee6443
SHA1 914879a573abd13ec2467b60d578194500b486c9
SHA512 e6c76d7efae0df4f21008bcefcfa67f24ed4f15f81147ee272324191f9a20a55ffc7dea6c4666d1fbd71e740a83665dfbe8d3cd51f822c17f76488f8280733d8
SSDEEP 3072:43FBc6qHzz5TW41RVDkzPgSqCBZBq4Prc35x:JpW4hSPw4G4P
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13911

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA GetThreadContext SetConsoleCtrlHandler GlobalFindAtomW TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeW GetLastError GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxW FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode HeapAlloc DeleteFileA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing