file[.]exe | Triage™

General

Target
file.exe
Size 294KB
Sample220928-rmtywsgbb3
SHA256 a6944f5e05e82adbaa5a356d3c68d1220c5c5eafa59e63fb74a1ffd01fffb9cf
MD5 b08113b4900c0dd2b07f6bcd0aaeac51
SHA1 021b2cc5d7f0b1287e432a0a8e4ee5718f87b25e
SHA512 46616aa81189aaa63f34db097cec53dcf09aad8490e35cddf877ec86aff710d2b0cb1db3ed0742bab0a0f77e546d715268420953f31000c851933f5930d5cc1b
SSDEEP 6144:FaO7eL5iJLhraid4EVNjk0cClvJGJigavwVfIx:FCMJZaM1LbRx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 294KB

file.exe

IMPHASH 93226edf73e88569fc77ee00d1ab94d1
SHA256 a6944f5e05e82adbaa5a356d3c68d1220c5c5eafa59e63fb74a1ffd01fffb9cf
MD5 b08113b4900c0dd2b07f6bcd0aaeac51
SHA1 021b2cc5d7f0b1287e432a0a8e4ee5718f87b25e
SHA512 46616aa81189aaa63f34db097cec53dcf09aad8490e35cddf877ec86aff710d2b0cb1db3ed0742bab0a0f77e546d715268420953f31000c851933f5930d5cc1b
SSDEEP 6144:FaO7eL5iJLhraid4EVNjk0cClvJGJigavwVfIx:FCMJZaM1LbRx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30569

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA FindVolumeMountPointClose SetSystemTimeAdjustment FindNextFileW EnumResourceTypesA GetModuleFileNameW IsBadCodePtr LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA GetPrivateProfileStringA PeekConsoleInputA GlobalGetAtomNameA GetProcAddress GetSystemDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameA lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameA FoldStringW OpenWaitableTimerA ResetEvent GlobalWire GetComputerNameW GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW GetVolumePathNameW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

Sharing