file[.]exe | Triage™

General

Target
file.exe
Size 142KB
Sample220930-hrha8acgd6
SHA256 8e1d902dbb02b16c8b899a31fd91f84e72ae18eb2567bdffaf92d1960e96ae49
MD5 ab9ce4cd1ba8e80125837adc3eedef12
SHA1 ed9412796ce3f8bdd8c8b251ef25c80e3a92d5be
SHA512 b5a265cc996cf3300989cc09eac03d9de4cab0284eefc172f7a10904862898273689f2167ca3fc98feb5c46fd7183db572763b508f8c2cccecafa91cd4d157ac
SSDEEP 3072:naBUS+J+Vel8RmxLwMYopHvj75YAFIj/rl525hNbl9fS:DJ+VExLYotvj1YAF45UjVlQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 142KB

file.exe

IMPHASH 12d7c5ed1568bfa4ea0e3766cbfe3245
SHA256 8e1d902dbb02b16c8b899a31fd91f84e72ae18eb2567bdffaf92d1960e96ae49
MD5 ab9ce4cd1ba8e80125837adc3eedef12
SHA1 ed9412796ce3f8bdd8c8b251ef25c80e3a92d5be
SHA512 b5a265cc996cf3300989cc09eac03d9de4cab0284eefc172f7a10904862898273689f2167ca3fc98feb5c46fd7183db572763b508f8c2cccecafa91cd4d157ac
SSDEEP 3072:naBUS+J+Vel8RmxLwMYopHvj75YAFIj/rl525hNbl9fS:DJ+VExLYotvj1YAF45UjVlQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14455

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer OpenFileMappingA GetProfileIntA ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedExchange SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindCloseChangeNotification CopyFileExA MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoA LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize GetPrivateProfileStructA GetCPInfoExA PostQueuedCompletionStatus GlobalFindAtomW TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError GetCommandLineW InterlockedIncrement CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW SearchPathA FindResourceW GetSystemTimeAdjustment GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost GetMailslotInfo GetConsoleMode Sleep ExitProcess DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

CharUpperW

Sharing