file[.]exe | Triage™

General

Target
file.exe
Size 415KB
Sample220928-hvb9dagdbm
SHA256 3a978ceeb455e626596f38b479690abb82a464833f2e9f25ca14afca6f6f9b9a
MD5 fe580254d84973123f5b5088daadacf7
SHA1 0ef9e0dc36d81220a59d5997310f698e7f03a36c
SHA512 751eb1e331999de672ebf5358d8cffd4a567d99dfb306352dd45067dd2c7170f04465e584c4866d79644ba25b2a40dcd242a90bba924313b363c1e66c6c7af5a
SSDEEP 6144:mjhZEoUxuc1t4Pa68NEbNswqaybVqS0CR0iIpnigabwVfs:mjhZjfc1aWEhsPV4iMiB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 415KB

file.exe

IMPHASH d11875c477193ed1ba21d61ddbc06c18
SHA256 3a978ceeb455e626596f38b479690abb82a464833f2e9f25ca14afca6f6f9b9a
MD5 fe580254d84973123f5b5088daadacf7
SHA1 0ef9e0dc36d81220a59d5997310f698e7f03a36c
SHA512 751eb1e331999de672ebf5358d8cffd4a567d99dfb306352dd45067dd2c7170f04465e584c4866d79644ba25b2a40dcd242a90bba924313b363c1e66c6c7af5a
SSDEEP 6144:mjhZEoUxuc1t4Pa68NEbNswqaybVqS0CR0iIpnigabwVfs:mjhZjfc1aWEhsPV4iMiB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36889

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputA WaitNamedPipeW FindVolumeMountPointClose SetSystemTimeAdjustment FindNextFileW EnumResourceTypesW GetModuleFileNameW IsBadCodePtr DeleteFileA SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameW GetPrivateProfileStringA PeekConsoleInputA GlobalGetAtomNameA GetProcAddress GetSystemDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameW lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW FoldStringW ResetEvent GlobalWire GetComputerNameW GetVersionExA GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameA GetFileSize GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW FindFirstChangeNotificationA GetVolumePathNameA RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA HeapSize FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

Sharing