file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample220927-cp52lscch3
SHA256 36a459c48622cdcdbfa27704398f4de1ee66e2e0b9ec6159ed57e66353beba22
MD5 1af35a79d9651611175e58a3218a6bbf
SHA1 d4af156402b2009b52ec650ddfc629340beb02dd
SHA512 75bfa496702592b2a64afd6cdbf14e04ca25cb87c4b3c4cb2acbccfe84ccbd8adc349d1278526418a93e9378b9367db614f3a75ef872b62fb8b4c5e1659cbd71
SSDEEP 3072:yO7NHTI5VS6THZFntgEdUiZqzBC1uX+rjyqJztHK+edpOuz9fe0SmBbn1wmXF75B:ynS6TPntgTiAw1uX+ruqZypF5ll1we
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 838f718910cdf3a4ebf0855233529379
SHA256 36a459c48622cdcdbfa27704398f4de1ee66e2e0b9ec6159ed57e66353beba22
MD5 1af35a79d9651611175e58a3218a6bbf
SHA1 d4af156402b2009b52ec650ddfc629340beb02dd
SHA512 75bfa496702592b2a64afd6cdbf14e04ca25cb87c4b3c4cb2acbccfe84ccbd8adc349d1278526418a93e9378b9367db614f3a75ef872b62fb8b4c5e1659cbd71
SSDEEP 3072:yO7NHTI5VS6THZFntgEdUiZqzBC1uX+rjyqJztHK+edpOuz9fe0SmBbn1wmXF75B:ynS6TPntgTiAw1uX+ruqZypF5ll1we
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13927

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalShrink InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetWindowsDirectoryW GetCPInfoExA PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError SearchPathW GetCommandLineW InterlockedIncrement GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo SetFilePointer GetConsoleMode HeapReAlloc HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperW

Sharing