file[.]exe | Triage™

General

Target
file.exe
Size 216KB
Sample220927-bkhvvaddek
SHA256 0f2dfae8d8b57cf0f90c4fca39d731c5da678e3defeb3d4812c0bddc83e3e66a
MD5 5550ab3c735bf765b2e39e77e2e61a52
SHA1 97c71791d08fd63572bd3d29e29f5b296fc9d619
SHA512 6ec82e4fd9e6802126ed85e824debe6bb09fb51d8ef815779de9c6e59a8e2b8b4f7f10d1986e712c5233c279bb3d126d482b78d96bdf3c486b6555847087ff8c
SSDEEP 3072:EO1cTI5YuUfyazDlJA4yZVWaU5JeJXMFkqFi8f5W2Xxl6U4FBsAzyoBSu55B:E5uUfyadGDVceJXMiqFpf42xj4FGmS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 216KB

file.exe

IMPHASH 838f718910cdf3a4ebf0855233529379
SHA256 0f2dfae8d8b57cf0f90c4fca39d731c5da678e3defeb3d4812c0bddc83e3e66a
MD5 5550ab3c735bf765b2e39e77e2e61a52
SHA1 97c71791d08fd63572bd3d29e29f5b296fc9d619
SHA512 6ec82e4fd9e6802126ed85e824debe6bb09fb51d8ef815779de9c6e59a8e2b8b4f7f10d1986e712c5233c279bb3d126d482b78d96bdf3c486b6555847087ff8c
SSDEEP 3072:EO1cTI5YuUfyazDlJA4yZVWaU5JeJXMFkqFi8f5W2Xxl6U4FBsAzyoBSu55B:E5uUfyadGDVceJXMiqFpf42xj4FGmS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13927

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalShrink InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetWindowsDirectoryW GetCPInfoExA PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError SearchPathW GetCommandLineW InterlockedIncrement GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo SetFilePointer GetConsoleMode HeapReAlloc HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperW

Sharing