file[.]exe | Triage™

General

Target
file.exe
Size 239KB
Sample220926-efmj1shce3
SHA256 7a57b4ffa3a93adcc50c41b08409763c33e292143c0775e8c525957e41c4706c
MD5 a314267102e34f113beebd63d54d4d9b
SHA1 90729893843eb2a3d92b78a6691a445cfca6c920
SHA512 a14cc4790ebe8e9bb51f726cefa62e3a4024f118b9371ef8d498113b0cd077dccffeed8566631e124d3b816ef6bcf9004ba76c67b0bd28ddf0e54b5b9ad3b3c2
SSDEEP 3072:+Kq0G5avU+CfCV6nG97tfdl4yqKkk1HNsdm3ekOupGtctiCmvPvUwgMB5W+5x:jU+Cfq997z5B1HNA01FrmvPsw2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 239KB

file.exe

IMPHASH 56a3cdaf41d3763407f3136e7ac0e308
SHA256 7a57b4ffa3a93adcc50c41b08409763c33e292143c0775e8c525957e41c4706c
MD5 a314267102e34f113beebd63d54d4d9b
SHA1 90729893843eb2a3d92b78a6691a445cfca6c920
SHA512 a14cc4790ebe8e9bb51f726cefa62e3a4024f118b9371ef8d498113b0cd077dccffeed8566631e124d3b816ef6bcf9004ba76c67b0bd28ddf0e54b5b9ad3b3c2
SSDEEP 3072:+Kq0G5avU+CfCV6nG97tfdl4yqKkk1HNsdm3ekOupGtctiCmvPvUwgMB5W+5x:jU+Cfq997z5B1HNA01FrmvPsw2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12839

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoW LocalSize GetProcessPriorityBoost FindFirstChangeNotificationW GlobalGetAtomNameW FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA VirtualAlloc SetConsoleScreenBufferSize VirtualLock GetProcessAffinityMask GetCPInfoExA GetThreadContext SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetCommandLineW GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasW OpenWaitableTimerW GetModuleHandleA LoadLibraryW TerminateProcess HeapReAlloc EnterCriticalSection EnumSystemLocalesA DisableThreadLibraryCalls OpenMutexW SystemTimeToFileTime SearchPathA SetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringA SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc GetFileInformationByHandle SetLastError GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoA SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing