file[.]exe | Triage™

General

Target
file.exe
Size 415KB
Sample220927-1fwzcaefc4
SHA256 49c6e4c85333d50090a51d3d95bbc2ecda4e461dcb0f14f5ca730ebf540f1f9f
MD5 2bbd5e6de0a79d3bc3b76f0b996141f9
SHA1 5260c1e39da5ed84fb1d5d232f4ce5d07901a40f
SHA512 05a5478f2c4522bf336d17dd61bceb18b8cbb194c1e5cd2b6e96856efceee434958ca29114b9cf7738da1d70218f2772fb2eb9933cea0211e521d29fe5986fe9
SSDEEP 6144:cwa7zbKs6fHNJj8+oJa4HnQ6J0kurPG+tMnbMaLVA0k0PnigabwVfs:cwa7zWpft7F4HnbJ0tMnwgPiB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 415KB

file.exe

IMPHASH beddc31176fbd42897a58cb208f48486
SHA256 49c6e4c85333d50090a51d3d95bbc2ecda4e461dcb0f14f5ca730ebf540f1f9f
MD5 2bbd5e6de0a79d3bc3b76f0b996141f9
SHA1 5260c1e39da5ed84fb1d5d232f4ce5d07901a40f
SHA512 05a5478f2c4522bf336d17dd61bceb18b8cbb194c1e5cd2b6e96856efceee434958ca29114b9cf7738da1d70218f2772fb2eb9933cea0211e521d29fe5986fe9
SSDEEP 6144:cwa7zbKs6fHNJj8+oJa4HnQ6J0kurPG+tMnbMaLVA0k0PnigabwVfs:cwa7zWpft7F4HnbJ0tMnwgPiB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36921

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputA WaitNamedPipeW FindVolumeMountPointClose SetSystemTimeAdjustment FindNextFileW EnumResourceTypesW GetModuleFileNameW IsBadCodePtr DeleteFileA SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameW GetPrivateProfileStringA PeekConsoleInputA GetModuleHandleA GetProcAddress GetSystemDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameW lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW FoldStringW ResetEvent GlobalWire GetComputerNameW GetVersionExA GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameA GetFileSize GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW FindFirstChangeNotificationA GetVolumePathNameA GlobalGetAtomNameA LoadLibraryA RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA HeapSize FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

advapi32

ClearEventLogA

ole32

CoRevokeMallocSpy

Sharing