file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample220927-d78e5adefq
SHA256 3453403f70ebbfc2c5bba18cacc34963ba3598fa3e4934f6ccf27ed59c6ee7fd
MD5 4e38088a62c908d4ab44d57701fcce68
SHA1 bf1191687e5032bc62177135340bfdc11581f332
SHA512 83c64fec6ab6b154253c2e9071e4ac459a6dfc427727355d36b2df3316b08debedef07413b19d99ca9e0828b672a21fb16e1b36500695ecec00b6f9664f28635
SSDEEP 3072:2OoiiTI5XDo54ncPgSdTnqW3arIkcAM8qV/7oumwmhYio3R26JUnX5B:2ADo+agSNqXmSw0pqbhs
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 838f718910cdf3a4ebf0855233529379
SHA256 3453403f70ebbfc2c5bba18cacc34963ba3598fa3e4934f6ccf27ed59c6ee7fd
MD5 4e38088a62c908d4ab44d57701fcce68
SHA1 bf1191687e5032bc62177135340bfdc11581f332
SHA512 83c64fec6ab6b154253c2e9071e4ac459a6dfc427727355d36b2df3316b08debedef07413b19d99ca9e0828b672a21fb16e1b36500695ecec00b6f9664f28635
SSDEEP 3072:2OoiiTI5XDo54ncPgSdTnqW3arIkcAM8qV/7oumwmhYio3R26JUnX5B:2ADo+agSNqXmSw0pqbhs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13927

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalShrink InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetWindowsDirectoryW GetCPInfoExA PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError SearchPathW GetCommandLineW InterlockedIncrement GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo SetFilePointer GetConsoleMode HeapReAlloc HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperW

Sharing