file[.]exe | Triage™

General

Target
file.exe
Size 383KB
Sample220928-nbehaaggfn
SHA256 1b791006a7e6e884489c02fa3b3d4a8e0bead8f245bd4e5c8c73da0831278c1e
MD5 27d460d0e1293c7e02f81a158289f52e
SHA1 ece31259fad90230700c473ac2de91a6f8c37091
SHA512 4bccaebdf48139e81fa87401bf7574a1a581fca1bff4eb3f5cd920d74241b6d596211da4d5bab9753fb294081d2cc2b0d0ad03d1e144729d7d5fe2c74b492326
SSDEEP 6144:F7AF+KeOuZfeD2WA+UQfyTm6jr46jnajfZu6C290j0FFigavwVfIf:FMYPXfeD5A+Ur66jr46eZC29/FIRf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 383KB

file.exe

IMPHASH 2a1dd2daf6fcaa8405a3968231f4dd38
SHA256 1b791006a7e6e884489c02fa3b3d4a8e0bead8f245bd4e5c8c73da0831278c1e
MD5 27d460d0e1293c7e02f81a158289f52e
SHA1 ece31259fad90230700c473ac2de91a6f8c37091
SHA512 4bccaebdf48139e81fa87401bf7574a1a581fca1bff4eb3f5cd920d74241b6d596211da4d5bab9753fb294081d2cc2b0d0ad03d1e144729d7d5fe2c74b492326
SSDEEP 6144:F7AF+KeOuZfeD2WA+UQfyTm6jr46jnajfZu6C290j0FFigavwVfIf:FMYPXfeD5A+Ur66jr46eZC29/FIRf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30569

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputA WaitNamedPipeA FindVolumeMountPointClose SetSystemTimeAdjustment FindNextFileW EnumResourceTypesA GetModuleFileNameW IsBadCodePtr DeleteFileA SearchPathW VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA GetPrivateProfileStringA PeekConsoleInputA GlobalGetAtomNameA GetProcAddress GetSystemDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameW lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW FoldStringW ResetEvent GlobalWire GetComputerNameW GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameA GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW FindFirstChangeNotificationA GetVolumePathNameA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

Sharing