file[.]exe | Triage™

General

Target
file.exe
Size 129KB
Sample220926-3tz92acbf2
SHA256 51d731f0dd3f253a5bff6fe46b92fcdc576b3eb2e12fb2cd213f18db5fa3d850
MD5 4ca202b9f0ab111160d8f76828b3c846
SHA1 9de7f99dbbc1e5884c1c19b4dc4fc5c7547c14c9
SHA512 2391f9c2ace749183dbee6abc43c9380226fd0f80d92933957f0382ea659670510be4a013f3284407950000e07a930802bc38384d86f357774934d7360eaebd6
SSDEEP 3072:BF2RgtTI5wZ8UvYFAujPq8mCHr5/gWP/nciex897LEu5B:BtZ8Z7LplpP/Bex8C
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 129KB

file.exe

IMPHASH 838f718910cdf3a4ebf0855233529379
SHA256 51d731f0dd3f253a5bff6fe46b92fcdc576b3eb2e12fb2cd213f18db5fa3d850
MD5 4ca202b9f0ab111160d8f76828b3c846
SHA1 9de7f99dbbc1e5884c1c19b4dc4fc5c7547c14c9
SHA512 2391f9c2ace749183dbee6abc43c9380226fd0f80d92933957f0382ea659670510be4a013f3284407950000e07a930802bc38384d86f357774934d7360eaebd6
SSDEEP 3072:BF2RgtTI5wZ8UvYFAujPq8mCHr5/gWP/nciex897LEu5B:BtZ8Z7LplpP/Bex8C
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13927

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalShrink InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetWindowsDirectoryW GetCPInfoExA PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError SearchPathW GetCommandLineW InterlockedIncrement GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo SetFilePointer GetConsoleMode HeapReAlloc HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperW

Sharing