file[.]exe | Triage™

General

Target
file.exe
Size 129KB
Sample220927-at25eaddar
SHA256 7e2b5001b6ef97aab3849d33f93d7c56e4d1748fa4eeef3d3e02d5908ee48255
MD5 8d24cb9639beb800b32ed7e24b009c9c
SHA1 edfaca787f8c3e93432b9d4ee3bcce5545b2eeb1
SHA512 364a36409257e7743e9471138f981b718b49f31c0e92512805bd5755d16cb11d7414a54e76d1c396771eb70613face6e3c3cf8203fd905c8f48e1632cd28c5df
SSDEEP 3072:gSy8/TI5cTRSzyXj1wDhz6rp+3Freb1Tn5B:gjwRSGXJa60FrO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 129KB

file.exe

IMPHASH 838f718910cdf3a4ebf0855233529379
SHA256 7e2b5001b6ef97aab3849d33f93d7c56e4d1748fa4eeef3d3e02d5908ee48255
MD5 8d24cb9639beb800b32ed7e24b009c9c
SHA1 edfaca787f8c3e93432b9d4ee3bcce5545b2eeb1
SHA512 364a36409257e7743e9471138f981b718b49f31c0e92512805bd5755d16cb11d7414a54e76d1c396771eb70613face6e3c3cf8203fd905c8f48e1632cd28c5df
SSDEEP 3072:gSy8/TI5cTRSzyXj1wDhz6rp+3Freb1Tn5B:gjwRSGXJa60FrO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13927

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalShrink InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetWindowsDirectoryW GetCPInfoExA PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError SearchPathW GetCommandLineW InterlockedIncrement GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo SetFilePointer GetConsoleMode HeapReAlloc HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperW

Sharing