file[.]exe | Triage™

General

Target
file.exe
Size 153KB
Sample220926-sb53fsbbc4
SHA256 757ec4bdfb9ded3d0d68b3c96760e145beb95aad33cbc07c205b591a9a8945ee
MD5 6a9b2c3164f30f73c41a3da26f8ef936
SHA1 b4ade644f1969cfc7920832afa7a7522643c1178
SHA512 fcefdbc7339bc0d5f4497306da38cab4154ea850a5ebd8723d8cd9a4ece4aa2e869ece1ba693a9206a0a0912c9228ec868bd52263465a7a69f00e41866b9514b
SSDEEP 3072:OWmQTF5+IEfAHTTGIS2CfBEyc11Blcassxn5B:EzfAH/w1Tc1N7x
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 153KB

file.exe

IMPHASH ea557b680f38ebe5261c0eea92d4414e
SHA256 757ec4bdfb9ded3d0d68b3c96760e145beb95aad33cbc07c205b591a9a8945ee
MD5 6a9b2c3164f30f73c41a3da26f8ef936
SHA1 b4ade644f1969cfc7920832afa7a7522643c1178
SHA512 fcefdbc7339bc0d5f4497306da38cab4154ea850a5ebd8723d8cd9a4ece4aa2e869ece1ba693a9206a0a0912c9228ec868bd52263465a7a69f00e41866b9514b
SSDEEP 3072:OWmQTF5+IEfAHTTGIS2CfBEyc11Blcassxn5B:EzfAH/w1Tc1N7x
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13191

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetProcessAffinityMask GetCPInfoExA PostQueuedCompletionStatus SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetCommandLineW GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetOverlappedResult GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedExchange FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoA SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing