file[.]exe | Triage™

General

Target
file.exe
Size 241KB
Sample220926-qb2zpaaha9
SHA256 cbef68f0196d1dd5d4226824593481affa8deacb3aa8f513cc46ce6b7079eea8
MD5 6bb8f5332a13cd525149708a68a44c1f
SHA1 1378147587efd5db076f07f902b8650e24347985
SHA512 a0fc8cf704c21c90afb4f9e1575c4b9fdadc7ff0a4b2a2ad13b9570e3636b9f98db0af74b0d33ac5fe366176a80357ebb9d5b52e5e0334bfabc924630e330e2a
SSDEEP 3072:knjITF5p+WgGfnzlPs9EYFYdgd7LQmz2QiEsHSkxi5NvcNzFcVDLB25B:Ay+WpzA3uud4U2vEsHSkxYviFcV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 241KB

file.exe

IMPHASH ea557b680f38ebe5261c0eea92d4414e
SHA256 cbef68f0196d1dd5d4226824593481affa8deacb3aa8f513cc46ce6b7079eea8
MD5 6bb8f5332a13cd525149708a68a44c1f
SHA1 1378147587efd5db076f07f902b8650e24347985
SHA512 a0fc8cf704c21c90afb4f9e1575c4b9fdadc7ff0a4b2a2ad13b9570e3636b9f98db0af74b0d33ac5fe366176a80357ebb9d5b52e5e0334bfabc924630e330e2a
SSDEEP 3072:knjITF5p+WgGfnzlPs9EYFYdgd7LQmz2QiEsHSkxi5NvcNzFcVDLB25B:Ay+WpzA3uud4U2vEsHSkxYviFcV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13207

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetProcessAffinityMask GetCPInfoExA PostQueuedCompletionStatus SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetCommandLineW GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetOverlappedResult GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoA SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing