file[.]exe | Triage™

General

Target
file.exe
Size 415KB
Sample220927-v5ehpseag6
SHA256 ddbfddc064a8b33ebadaf495fa02664a001ff570b65557f7a7504a6caa795a5e
MD5 224b8381de1a113193ce920e61979d05
SHA1 457c5e724bb92a4a8d2f84d13afc0353e55f6f8a
SHA512 61f5387b5ca28afb4fcbddace046bd57570617ec631d1f6db014a2d4ab58a8a655e8e8bbc6ff9dfcc5af237e3641b9ad3f872a753eec27adfeb2dc87623b45e8
SSDEEP 6144:DO4BYYAt0fhBdNJdurCtWNJZSAt6wHXPbSBPswvRH0oJ0S+nigabwVfs:DO4Bkt0fNvYrCYNJZSAcwHKP4wN+iB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 415KB

file.exe

IMPHASH 86301d78b866ace8728c2cb9689a640b
SHA256 ddbfddc064a8b33ebadaf495fa02664a001ff570b65557f7a7504a6caa795a5e
MD5 224b8381de1a113193ce920e61979d05
SHA1 457c5e724bb92a4a8d2f84d13afc0353e55f6f8a
SHA512 61f5387b5ca28afb4fcbddace046bd57570617ec631d1f6db014a2d4ab58a8a655e8e8bbc6ff9dfcc5af237e3641b9ad3f872a753eec27adfeb2dc87623b45e8
SSDEEP 6144:DO4BYYAt0fhBdNJdurCtWNJZSAt6wHXPbSBPswvRH0oJ0S+nigabwVfs:DO4Bkt0fNvYrCYNJZSAcwHKP4wN+iB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36969

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputA WaitNamedPipeW FindVolumeMountPointClose SetSystemTimeAdjustment FindNextFileW EnumResourceTypesW GetModuleFileNameW IsBadCodePtr DeleteFileA SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameW GetPrivateProfileStringA PeekConsoleInputA GetModuleHandleA GetProcAddress GetSystemDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameW lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW FoldStringW ResetEvent GlobalWire GetComputerNameW GetVersionExA GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameA GetFileSize GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW FindFirstChangeNotificationA GetVolumePathNameA GlobalGetAtomNameA LoadLibraryA RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA HeapSize FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

advapi32

ClearEventLogA

ole32

CoRevokeMallocSpy

msimg32

TransparentBlt

Sharing