file[.]exe | Triage™

General

Target
file.exe
Size 406KB
Sample220927-jmh8dschc7
SHA256 6999a96ba98cdc49812e7f521866a2d1ff1eab4cb193dd2c7c12bbd7e5d19694
MD5 7dbf7a50e20b116ee7696a3fd8a4f44a
SHA1 6afcb1011236c5f26a16564208c915013fe05339
SHA512 ad89e275f7ed3f95913ddee15c51e799bf10a80c2b2b16888dc905eb6ff416c13fd200083314fa512f5468439a87c26ec323ce9d3bfec7638884a40caf59f6ea
SSDEEP 6144:cThbcTgybi5oAqRakEO0jlZSpAKycXRPiEmZ0znigabwVf:cT+Tgy+5oAhk0lZsAkHzi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 406KB

file.exe

IMPHASH 221ffe762e54e3ad13848bfcbcdbf16a
SHA256 6999a96ba98cdc49812e7f521866a2d1ff1eab4cb193dd2c7c12bbd7e5d19694
MD5 7dbf7a50e20b116ee7696a3fd8a4f44a
SHA1 6afcb1011236c5f26a16564208c915013fe05339
SHA512 ad89e275f7ed3f95913ddee15c51e799bf10a80c2b2b16888dc905eb6ff416c13fd200083314fa512f5468439a87c26ec323ce9d3bfec7638884a40caf59f6ea
SSDEEP 6144:cThbcTgybi5oAqRakEO0jlZSpAKycXRPiEmZ0znigabwVf:cT+Tgy+5oAhk0lZsAkHzi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37657

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeW CommConfigDialogW SetSystemTimeAdjustment FindNextFileA EnumResourceTypesW GetModuleFileNameW UpdateResourceA LoadLibraryW DeleteFileA SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameW GetPrivateProfileStringA GlobalGetAtomNameW GetProcAddress FindFirstChangeNotificationW GetFileType lstrcpynA AddAtomA SetConsoleCtrlHandler GetLongPathNameW FoldStringW FindNextFileW OpenJobObjectA InitializeCriticalSection GlobalWire GetComputerNameW GetVersionExA GetSystemDefaultLCID GetSystemDefaultLangID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileSize GetFileAttributesExW SetComputerNameW GetFileAttributesA ReadConsoleW GetVolumePathNameA PeekConsoleInputA LoadLibraryA RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount ReadFile SetStdHandle GetConsoleCP GetConsoleMode CloseHandle CreateFileA HeapSize FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

advapi32

ClearEventLogA

ole32

CoRevokeMallocSpy

msimg32

TransparentBlt

Sharing