file[.]exe | Triage™

General

Target
file.exe
Size 326KB
Sample220928-e9c8fagbfk
SHA256 fe19654aeda82b07e10241fba3ede4eb8b16e70caa3abd2f5f4757baa84f1ccc
MD5 2ada940a37877fa48da4f37a3e9040ab
SHA1 0814042261e498fee4995da3a165b325d5885d9a
SHA512 c7749348ca60a86bcd1b84f4f032a50cf87af8e5bc69e06bc425005ee10a85291ba13294628179d192f5d536f043a18a66f374755d3b8f39d4bb22ec01e6ed00
SSDEEP 6144:X+5OVPYjroLcM1x8nHFz/NlWZ0nVBYyanigabwVfs:X+5O+roLcpHFLN9n7aiB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 326KB

file.exe

IMPHASH beddc31176fbd42897a58cb208f48486
SHA256 fe19654aeda82b07e10241fba3ede4eb8b16e70caa3abd2f5f4757baa84f1ccc
MD5 2ada940a37877fa48da4f37a3e9040ab
SHA1 0814042261e498fee4995da3a165b325d5885d9a
SHA512 c7749348ca60a86bcd1b84f4f032a50cf87af8e5bc69e06bc425005ee10a85291ba13294628179d192f5d536f043a18a66f374755d3b8f39d4bb22ec01e6ed00
SSDEEP 6144:X+5OVPYjroLcM1x8nHFz/NlWZ0nVBYyanigabwVfs:X+5O+roLcpHFLN9n7aiB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36921

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputA WaitNamedPipeW FindVolumeMountPointClose SetSystemTimeAdjustment FindNextFileW EnumResourceTypesW GetModuleFileNameW IsBadCodePtr DeleteFileA SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameW GetPrivateProfileStringA PeekConsoleInputA GetModuleHandleA GetProcAddress GetSystemDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameW lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW FoldStringW ResetEvent GlobalWire GetComputerNameW GetVersionExA GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameA GetFileSize GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW FindFirstChangeNotificationA GetVolumePathNameA GlobalGetAtomNameA LoadLibraryA RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA HeapSize FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

advapi32

ClearEventLogA

ole32

CoRevokeMallocSpy

Sharing