file[.]exe | Triage™

General

Target
file.exe
Size 241KB
Sample220926-q9vm9sbab9
SHA256 c9208801f999bb656711a5b2ff74fb074fc323974735ce6323ef407e5b50cf3e
MD5 24b1afd64e5fd5f86d706c3b128ac53f
SHA1 e348fb12db1c53d9cb4c12c32d4e37f6e664a95b
SHA512 599f64e22ce9fabe375b03a6c7dc8d9238fbca7ac596baa695dec68961669166bd0e00857b7f52d4ff309769c8140df819ad4a7ce1aabb4b0abd7038a15866df
SSDEEP 3072:sVuQiaOTF5yAuMf8v/K4/fgMUDj/bJIOA6iOMDoNqvWo17ymCPV7jBrz5B:Ci1f8vSMBSj/bJrMkNcL1IdZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 241KB

file.exe

IMPHASH ea557b680f38ebe5261c0eea92d4414e
SHA256 c9208801f999bb656711a5b2ff74fb074fc323974735ce6323ef407e5b50cf3e
MD5 24b1afd64e5fd5f86d706c3b128ac53f
SHA1 e348fb12db1c53d9cb4c12c32d4e37f6e664a95b
SHA512 599f64e22ce9fabe375b03a6c7dc8d9238fbca7ac596baa695dec68961669166bd0e00857b7f52d4ff309769c8140df819ad4a7ce1aabb4b0abd7038a15866df
SSDEEP 3072:sVuQiaOTF5yAuMf8v/K4/fgMUDj/bJIOA6iOMDoNqvWo17ymCPV7jBrz5B:Ci1f8vSMBSj/bJrMkNcL1IdZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13191

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetProcessAffinityMask GetCPInfoExA PostQueuedCompletionStatus SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetCommandLineW GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetOverlappedResult GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoA SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing