file[.]exe | Triage™

General

Target
file.exe
Size 359KB
Sample220929-cgppnaafar
SHA256 fbc6bc45a7fed79f3d44c4d2f3d0e2c469ae4ef24243bc0f5a3ae7eb6f395824
MD5 586ba7b420923c1ea0d16600753993b1
SHA1 b4e13d100b5cd04c0c7f2e39c92fae9a1bdd65ba
SHA512 041496a91d8365eb32c00903b4e8439751153e293134a4b753b8839ed7ca730d3bc2e537b3cc5fc726e23730b0b6789bd8758e49a378e871ce7bbcb311debb9a
SSDEEP 6144:S/S+o4MBvzU7cD97Vtu88BRyC+lKHpeFwfiga3wVfg:S5MBY7cDc1BsQ43p
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 359KB

file.exe

IMPHASH 6fec1abc95e8dc40bf514011d243c58d
SHA256 fbc6bc45a7fed79f3d44c4d2f3d0e2c469ae4ef24243bc0f5a3ae7eb6f395824
MD5 586ba7b420923c1ea0d16600753993b1
SHA1 b4e13d100b5cd04c0c7f2e39c92fae9a1bdd65ba
SHA512 041496a91d8365eb32c00903b4e8439751153e293134a4b753b8839ed7ca730d3bc2e537b3cc5fc726e23730b0b6789bd8758e49a378e871ce7bbcb311debb9a
SSDEEP 6144:S/S+o4MBvzU7cD97Vtu88BRyC+lKHpeFwfiga3wVfg:S5MBY7cDc1BsQ43p
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30457

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA InterlockedCompareExchange OpenWaitableTimerA CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA SetSystemTimeAdjustment FindNextFileW EnumResourceTypesA GetModuleFileNameW IsBadCodePtr LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA GetProcAddress GetUserDefaultLangID GetConsoleAliasW FindFirstChangeNotificationW GetFileType SetFileShortNameA lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameA FoldStringW ResetEvent GlobalWire GetComputerNameA GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetCalendarInfoW SetComputerNameA GetFileAttributesA GetVolumePathNameW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

Sharing