file[.]exe | Triage™

General

Target
file.exe
Size 317KB
Sample220927-lrmgqaecaj
SHA256 f5f050cdc4631d9d17dd5b02f3d6826cd45dd3feab0949f83b54d855208e64da
MD5 cc371140ea3a4c1acf96b63c60b0b952
SHA1 6e0a2809bc5768e43a58de9db7dc546fc1384345
SHA512 f6c8ace09d478daadec976b702b0e5781615bcc03368cf6709b070954a3e691d9b583fa5bb85075d14ce849a014a042ba0984964300bb445ed17925c9e940189
SSDEEP 3072:sxXPgLzvJaYXKD7JF25wC6gafDQ0PnZ7QTdMy0K6QpvpM/h3BsxkgaBChU/pZa9O:sVczv8JoqJQT2y0MnigabwVf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 317KB

file.exe

IMPHASH cd8cad143d3ee8002f8cfc0917b9e7e8
SHA256 f5f050cdc4631d9d17dd5b02f3d6826cd45dd3feab0949f83b54d855208e64da
MD5 cc371140ea3a4c1acf96b63c60b0b952
SHA1 6e0a2809bc5768e43a58de9db7dc546fc1384345
SHA512 f6c8ace09d478daadec976b702b0e5781615bcc03368cf6709b070954a3e691d9b583fa5bb85075d14ce849a014a042ba0984964300bb445ed17925c9e940189
SSDEEP 3072:sxXPgLzvJaYXKD7JF25wC6gafDQ0PnZ7QTdMy0K6QpvpM/h3BsxkgaBChU/pZa9O:sVczv8JoqJQT2y0MnigabwVf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37785

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeW CommConfigDialogW SetSystemTimeAdjustment FindNextFileA EnumResourceTypesW GetModuleFileNameW UpdateResourceA DeleteFileA SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameW GetPrivateProfileStringA PeekConsoleInputA GetModuleHandleA GetProcAddress FindFirstChangeNotificationW GetFileType lstrcpynA AddAtomW SetConsoleCtrlHandler GetLongPathNameW FoldStringW FindNextFileW InitializeCriticalSection GlobalWire GetComputerNameW GetVersionExA GetSystemDefaultLCID GetSystemDefaultLangID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileSize GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW FindFirstChangeNotificationA GetVolumePathNameA GlobalGetAtomNameW LoadLibraryA RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount ReadFile SetStdHandle GetConsoleCP GetConsoleMode CloseHandle CreateFileA HeapSize FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

advapi32

ClearEventLogA

ole32

CoRevokeMallocSpy

msimg32

TransparentBlt

Sharing