file[.]exe | Triage™

General

Target
file.exe
Size 241KB
Sample220926-s9ctkabcb5
SHA256 2da0e38b12f592fd9fbf4a14a8922edc5df7d3b178d519f13295f5bc4826d3f0
MD5 553f7155ec1a9cac7a147a4e878b62dc
SHA1 e4605d6344a6967f06921b71501db4bb5765299f
SHA512 1d1ac48b3578f157d5cd1ccd7f6bc600a3e6cadfae45202302589ca7972893178c3914855b43d07114c401bb89e934e8545dce0d78fde6cc7f4a05d706c377f1
SSDEEP 3072:JU36zTc5oHVGtM9S4no/APrOfEMkLouMLmFuZRWSFbDDKMg69OdRNSXTsaIqS3c+:9w46yr+EBouM8uZRJ1bgUOZC9q3c
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 241KB

file.exe

IMPHASH c3d42942666b0e1aa4b91cf861b5e7df
SHA256 2da0e38b12f592fd9fbf4a14a8922edc5df7d3b178d519f13295f5bc4826d3f0
MD5 553f7155ec1a9cac7a147a4e878b62dc
SHA1 e4605d6344a6967f06921b71501db4bb5765299f
SHA512 1d1ac48b3578f157d5cd1ccd7f6bc600a3e6cadfae45202302589ca7972893178c3914855b43d07114c401bb89e934e8545dce0d78fde6cc7f4a05d706c377f1
SSDEEP 3072:JU36zTc5oHVGtM9S4no/APrOfEMkLouMLmFuZRWSFbDDKMg69OdRNSXTsaIqS3c+:9w46yr+EBouM8uZRJ1bgUOZC9q3c
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13239

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalShrink InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetWindowsDirectoryW GetCPInfoExA PostQueuedCompletionStatus SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetCommandLineW GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetProcessTimes InterlockedExchange GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoA SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing