file[.]exe | Triage™

General

Target
file.exe
Size 359KB
Sample220928-x1hexaaacr
SHA256 a44710e8bb09d22a156d27642f0966818a2eb800f093eab23155ed5342d04ece
MD5 147e262291880374d2f2f79113cf25af
SHA1 df165cc407cc6327a6c818e0e0c8cae80e193413
SHA512 1c73758a52e8cbf8cbf5cd84df3d3555b507951a601e768e98ece3ca3b88faaee2c58b22dd6413bb956c4de1861a12ad1de3ef865cf060a3482da081a22d080c
SSDEEP 6144:L58pEaEYk910COeXO+gFOiBXcL59nX9Q7iga3wVfg:LyRkb0CXeFOt3p
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 359KB

file.exe

IMPHASH 7a2bded761089c7614c50523f4eab77a
SHA256 a44710e8bb09d22a156d27642f0966818a2eb800f093eab23155ed5342d04ece
MD5 147e262291880374d2f2f79113cf25af
SHA1 df165cc407cc6327a6c818e0e0c8cae80e193413
SHA512 1c73758a52e8cbf8cbf5cd84df3d3555b507951a601e768e98ece3ca3b88faaee2c58b22dd6413bb956c4de1861a12ad1de3ef865cf060a3482da081a22d080c
SSDEEP 6144:L58pEaEYk910COeXO+gFOiBXcL59nX9Q7iga3wVfg:LyRkb0CXeFOt3p
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30457

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA SetSystemTimeAdjustment FindNextFileW EnumResourceTypesA GetModuleFileNameW IsBadCodePtr LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA GetProcAddress GetUserDefaultLangID GetConsoleAliasW FindFirstChangeNotificationW GetFileType SetFileShortNameA lstrcpynA AddAtomA SetConsoleCtrlHandler CreateMutexA GetLongPathNameA FoldStringW OpenWaitableTimerA ResetEvent GlobalWire GetComputerNameA GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleA GetVolumePathNameW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

Sharing