file[.]exe | Triage™

General

Target
file.exe
Size 171KB
Sample220926-cdt5zaabaq
SHA256 36bcd50056e237337fa39ea03e2f11d7916f932a3309bb7733998ceb6b66c623
MD5 11581bd3de63c39576181f6078428920
SHA1 84a31cad67a3f33a584115c175aad2de75f926e4
SHA512 a6749853db99de6c260a2c9d489fff89caa2abfbb7ba8fabc2f06efbf6aa48e39e13c4f202673da81433d921ff543a81d2077bab5c0b9e42d4ad448466848578
SSDEEP 3072:218QBM8mOs8uq35uH4O7RnRN/W3cBBBUUFM76G1YgHiRl2PIByqZKS5x:nY+4O7p/W8BUUFeYguvZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 171KB

file.exe

IMPHASH 6e82603bfff5065173a467b43e40d430
SHA256 36bcd50056e237337fa39ea03e2f11d7916f932a3309bb7733998ceb6b66c623
MD5 11581bd3de63c39576181f6078428920
SHA1 84a31cad67a3f33a584115c175aad2de75f926e4
SHA512 a6749853db99de6c260a2c9d489fff89caa2abfbb7ba8fabc2f06efbf6aa48e39e13c4f202673da81433d921ff543a81d2077bab5c0b9e42d4ad448466848578
SSDEEP 3072:218QBM8mOs8uq35uH4O7RnRN/W3cBBBUUFM76G1YgHiRl2PIByqZKS5x:nY+4O7p/W8BUUFeYguvZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13831

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA GetThreadContext SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleW CreateActCtxW FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexA SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoA SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing