file[.]exe | Triage™

General

Target
file.exe
Size 216KB
Sample220927-df63zsdecq
SHA256 1dc465050f1c4437b6daa9d13e9532af13c3738bddbb8e6c7207eec7df599bcf
MD5 5a0ddb90e0d761076aba5ff1d9cf78eb
SHA1 0c09f5b15aa7836d14a5561020a9a26575107e88
SHA512 1e1af5db5df9104780a8047bd85d24d0015a7a7689796d46061922829e8dc2f813d86f821bd683a7a4fb5859601dd8aa9381b1bc970036f41520e944e50a12a9
SSDEEP 3072:artkvzTI56ZHP5e36lJSeOAZWXKQAZk5DuGvhJLGxRv6jHAWcY2dTj/o06iyTL0/:aeRtRHlcAWit6hJSRvCHOYmj/rSL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 216KB

file.exe

IMPHASH 838f718910cdf3a4ebf0855233529379
SHA256 1dc465050f1c4437b6daa9d13e9532af13c3738bddbb8e6c7207eec7df599bcf
MD5 5a0ddb90e0d761076aba5ff1d9cf78eb
SHA1 0c09f5b15aa7836d14a5561020a9a26575107e88
SHA512 1e1af5db5df9104780a8047bd85d24d0015a7a7689796d46061922829e8dc2f813d86f821bd683a7a4fb5859601dd8aa9381b1bc970036f41520e944e50a12a9
SSDEEP 3072:artkvzTI56ZHP5e36lJSeOAZWXKQAZk5DuGvhJLGxRv6jHAWcY2dTj/o06iyTL0/:aeRtRHlcAWit6hJSRvCHOYmj/rSL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13943

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalShrink InterlockedExchange GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize VirtualLock GetPrivateProfileStructA GetWindowsDirectoryW GetCPInfoExA PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError SearchPathW GetCommandLineW InterlockedIncrement GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW TerminateProcess GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW SetConsoleCursorPosition RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo SetFilePointer GetConsoleMode HeapReAlloc HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperW

Sharing