file[.]exe | Triage™

General

Target
file.exe
Size 129KB
Sample220926-2zjc2acbb6
SHA256 adf8610d4a9a3bf3039508f2229a04e6caad4c5d50530e01fea54754cc72ba59
MD5 d7a7367a872ea8f4e5e1d868ef644b40
SHA1 32143c1c72edaef9d8254df670b3190fa11d39c3
SHA512 9793eb610f1d0fde8dc549d36bc22f41c5950648b504fdbf674011ade0284d0bc5454138fdbc02a4a167d3ccc524a7914ea5101522af0ae527d221fe254043e8
SSDEEP 3072:2W1geT85u1udiWuy5bn1RT6kprnfzVxNl35B:2YgKudhn5bf6kprfzll
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 129KB

file.exe

IMPHASH d7d5eb29f8cc9aa72be1b48a07c02672
SHA256 adf8610d4a9a3bf3039508f2229a04e6caad4c5d50530e01fea54754cc72ba59
MD5 d7a7367a872ea8f4e5e1d868ef644b40
SHA1 32143c1c72edaef9d8254df670b3190fa11d39c3
SHA512 9793eb610f1d0fde8dc549d36bc22f41c5950648b504fdbf674011ade0284d0bc5454138fdbc02a4a167d3ccc524a7914ea5101522af0ae527d221fe254043e8
SSDEEP 3072:2W1geT85u1udiWuy5bn1RT6kprnfzVxNl35B:2YgKudhn5bf6kprfzll
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13383

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalShrink InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetWindowsDirectoryW GetCPInfoExA PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError SearchPathW GetCommandLineW InterlockedIncrement GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo SetFilePointer GetConsoleMode DeleteFileA GetCommandLineA GetStartupInfoA HeapAlloc SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection VirtualAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperW

Sharing