file[.]exe | Triage™

General

Target
file.exe
Size 318KB
Sample220927-qfhfvaefcr
SHA256 050c4da21014e862e6e72e478aa6e070882aadf92d9c44ae27a9f6be5d65c8a1
MD5 d06e08241c9b350223d92855f21e42e5
SHA1 a466b9e19364efe73168dfb7fd911d83e3e165e2
SHA512 e90b99dc79f652d9ecf569aa8b366b651bb8c4cf744e94cec74cae17d6dd9aca9d58508a470c5eb66535ae355874acd36e192165a0e806c638403d4c2b410647
SSDEEP 3072:2FfX1BP90fWdWWDYq25SA1Hxuk+QK/+iIEWU0KY8gnVM/h3BsxkgaBChU/pZa9uR:2FPbuq8nRRK/+iI7U0zbVnigabwVf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 318KB

file.exe

IMPHASH 4474d995b78cfaa4bc8cbcb3075ac032
SHA256 050c4da21014e862e6e72e478aa6e070882aadf92d9c44ae27a9f6be5d65c8a1
MD5 d06e08241c9b350223d92855f21e42e5
SHA1 a466b9e19364efe73168dfb7fd911d83e3e165e2
SHA512 e90b99dc79f652d9ecf569aa8b366b651bb8c4cf744e94cec74cae17d6dd9aca9d58508a470c5eb66535ae355874acd36e192165a0e806c638403d4c2b410647
SSDEEP 3072:2FfX1BP90fWdWWDYq25SA1Hxuk+QK/+iIEWU0KY8gnVM/h3BsxkgaBChU/pZa9uR:2FPbuq8nRRK/+iI7U0zbVnigabwVf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37177

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputA WaitNamedPipeW CommConfigDialogW SetSystemTimeAdjustment FindNextFileW EnumResourceTypesW GetModuleFileNameW IsBadCodePtr DeleteFileA SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameW GetPrivateProfileStringA PeekConsoleInputA GetModuleHandleA GetProcAddress FindFirstChangeNotificationW GetFileType SetFileShortNameW lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW FoldStringW ResetEvent GlobalWire GetComputerNameW GetVersionExA GetSystemDefaultLCID GetSystemDefaultLangID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameA GetFileSize GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW FindFirstChangeNotificationA GetVolumePathNameA GlobalGetAtomNameA LoadLibraryA RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA HeapSize FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

advapi32

ClearEventLogA

ole32

CoRevokeMallocSpy

msimg32

TransparentBlt

Sharing