file[.]exe | Triage™

General

Target
file.exe
Size 258KB
Sample220926-c8qe9sacap
SHA256 6845fad8a7b8a7abb86a3f788352c5e856f8863ac3c40f8bc22a112d363c998b
MD5 5738eeab4dc44f85629aca4c6236f702
SHA1 b28e072363e63c0047094e8c5d690e064f69abff
SHA512 fb802bb1e42745f48a43b061796031f635629bd43b145f712bad6e46568b0dd3c719353cb651f79e3dc195e8a4a2b39972d72bc8ca9ea0498d57a21826ac5c13
SSDEEP 3072:8nxUsW0naKr35qqKmw93Dk6v86KEXY9/BTaAIbvbdDuPmEPIkAVypQ10O8CFBKcf:GCjVf3jTK9/ELbdDIfWypQ10O8C
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 258KB

file.exe

IMPHASH 6e82603bfff5065173a467b43e40d430
SHA256 6845fad8a7b8a7abb86a3f788352c5e856f8863ac3c40f8bc22a112d363c998b
MD5 5738eeab4dc44f85629aca4c6236f702
SHA1 b28e072363e63c0047094e8c5d690e064f69abff
SHA512 fb802bb1e42745f48a43b061796031f635629bd43b145f712bad6e46568b0dd3c719353cb651f79e3dc195e8a4a2b39972d72bc8ca9ea0498d57a21826ac5c13
SSDEEP 3072:8nxUsW0naKr35qqKmw93Dk6v86KEXY9/BTaAIbvbdDuPmEPIkAVypQ10O8CFBKcf:GCjVf3jTK9/ELbdDIfWypQ10O8C
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13831

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA GetThreadContext SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxW FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoA SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing