file[.]exe | Triage™

General

Target
file.exe
Size 414KB
Sample220928-gb96mafbb6
SHA256 f4338611e8a7c457d5dcf3b2186cdfd07639368b173528e5dbb3a2e244bb49ee
MD5 6d5de8fa3117116353eb394b93f0ac07
SHA1 705c91353d5f9bf26ecb4a3edc1e2a80c4b40f09
SHA512 3735b4dd6a93cf446fe0a9c7c97f7a47cf7a73e390feb4dbf012189b9dfd06ceac8aa04ac5e274ec8112e08d69f32489513351a2748d3fd5293cef1b1124b4f1
SSDEEP 6144:mQb9LhIzhwA+KVMtZ+6puD6SaFxQT0/jNnigabwVfs:mQbluzhw/K0+0uD6SwB5iB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 414KB

file.exe

IMPHASH d11875c477193ed1ba21d61ddbc06c18
SHA256 f4338611e8a7c457d5dcf3b2186cdfd07639368b173528e5dbb3a2e244bb49ee
MD5 6d5de8fa3117116353eb394b93f0ac07
SHA1 705c91353d5f9bf26ecb4a3edc1e2a80c4b40f09
SHA512 3735b4dd6a93cf446fe0a9c7c97f7a47cf7a73e390feb4dbf012189b9dfd06ceac8aa04ac5e274ec8112e08d69f32489513351a2748d3fd5293cef1b1124b4f1
SSDEEP 6144:mQb9LhIzhwA+KVMtZ+6puD6SaFxQT0/jNnigabwVfs:mQbluzhw/K0+0uD6SwB5iB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36889

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputA WaitNamedPipeW FindVolumeMountPointClose SetSystemTimeAdjustment FindNextFileW EnumResourceTypesW GetModuleFileNameW IsBadCodePtr DeleteFileA SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameW GetPrivateProfileStringA PeekConsoleInputA GlobalGetAtomNameA GetProcAddress GetSystemDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameW lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW FoldStringW ResetEvent GlobalWire GetComputerNameW GetVersionExA GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameA GetFileSize GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW FindFirstChangeNotificationA GetVolumePathNameA RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA HeapSize FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

Sharing