file[.]exe | Triage™

General

Target
file.exe
Size 661KB
Sample220930-eryfnaceb7
SHA256 cf0816c5e2349f00e9aa756dae4eecb8d5df624356bcbb21dadf77b1fcbfd5f8
MD5 e46c2ada51b0da4cc1ba1a33bc4f20b1
SHA1 8ffb434c3cbf6cb472479860338e5892cfaf9389
SHA512 50b93d2cc585a2314915c101fb4b61c1ae8daf844cf3b4c019eda43f5571fc8fafaeadc6b2b3796fcfe222d24f51da96d50c937da3c04db0e055c8a987c19d49
SSDEEP 12288:Z9ykRFRTdWzSdp3Y193pkgioSGOZjZGofxTxPLwZWweibhSa:ryKFRTszCo15pkgio4BZGofxlPUk+h5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 661KB

file.exe

IMPHASH 28ff36187c52fc15789fe4e587a23280
SHA256 cf0816c5e2349f00e9aa756dae4eecb8d5df624356bcbb21dadf77b1fcbfd5f8
MD5 e46c2ada51b0da4cc1ba1a33bc4f20b1
SHA1 8ffb434c3cbf6cb472479860338e5892cfaf9389
SHA512 50b93d2cc585a2314915c101fb4b61c1ae8daf844cf3b4c019eda43f5571fc8fafaeadc6b2b3796fcfe222d24f51da96d50c937da3c04db0e055c8a987c19d49
SSDEEP 12288:Z9ykRFRTdWzSdp3Y193pkgioSGOZjZGofxTxPLwZWweibhSa:ryKFRTszCo15pkgio4BZGofxlPUk+h5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14791

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer OpenFileMappingA GetProfileIntA ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedExchange SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindCloseChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize GetPrivateProfileStructA GetWindowsDirectoryW GetCPInfoExA PostQueuedCompletionStatus GlobalFindAtomW TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError GetCommandLineW InterlockedIncrement GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW GetSystemDirectoryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW TransactNamedPipe SearchPathA FindResourceW GetSystemTimeAdjustment GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo GetConsoleMode Sleep ExitProcess DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

CharUpperW

Sharing