file[.]exe | Triage™

General

Target
file.exe
Size 216KB
Sample220926-vreljsbdf2
SHA256 d3ba77deb12b2efd2fdc93eb6dd789727f49f4a3fac3cbb74d22fa1142413de2
MD5 28662d90901f77ef1f7563d06527dc37
SHA1 117347353515109e8dbe5e5cba0ffa46868be388
SHA512 fdea9b2f95f5b727f4b5f56e8680955b07335a4ddff0937221f2626c7540594896fd0022325769c7dae5f0b181af07b63bed52fb5c09cc26d478efed404b8adc
SSDEEP 3072:yH7OKAxTc5iirR3rsjIy5hwldTDooUjX/uxYYGhGhJNSVhtGNhc9Zht+5B:IFFAcybwlJUoUjX/UIhk+ht6c9Zh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 216KB

file.exe

IMPHASH c3d42942666b0e1aa4b91cf861b5e7df
SHA256 d3ba77deb12b2efd2fdc93eb6dd789727f49f4a3fac3cbb74d22fa1142413de2
MD5 28662d90901f77ef1f7563d06527dc37
SHA1 117347353515109e8dbe5e5cba0ffa46868be388
SHA512 fdea9b2f95f5b727f4b5f56e8680955b07335a4ddff0937221f2626c7540594896fd0022325769c7dae5f0b181af07b63bed52fb5c09cc26d478efed404b8adc
SSDEEP 3072:yH7OKAxTc5iirR3rsjIy5hwldTDooUjX/uxYYGhGhJNSVhtGNhc9Zht+5B:IFFAcybwlJUoUjX/UIhk+ht6c9Zh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13239

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalShrink InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetWindowsDirectoryW GetCPInfoExA PostQueuedCompletionStatus SetConsoleCtrlHandler GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetCommandLineW GetBinaryTypeW GetLastError SearchPathW GetCommandLineA GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetProcessTimes InterlockedExchange GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo GetUserDefaultUILanguage GetConsoleMode DeleteFileA GetStartupInfoA SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

Sharing