file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample220930-lml1dseahj
SHA256 4dd28dd784a8fd0abddf3320737dbb40c1c29af3ae71279a5cc47f201679604d
MD5 81c6041e65c69fc01969d39a902911c7
SHA1 73508e8e34dbc95f1010e82c074658c2ccc21966
SHA512 ed5d1a2d064c657135e393276213b2d47f02b999cab3c82d177695819734e1531e10f598282ad25125c4b3b5e0016d1d90b8a2c1b07aa1241a79f38148cd9dc2
SSDEEP 3072:TlKUqM4hlqRkKvgZTYjjJJg5qi3rqop/cOBJgsN/8553a1vy49WkZmuHbA0bL2:14yIKdJg5q8UoN/U34y0Zv7A0bC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 1076d4eb9f464e21562d6629e831473b
SHA256 4dd28dd784a8fd0abddf3320737dbb40c1c29af3ae71279a5cc47f201679604d
MD5 81c6041e65c69fc01969d39a902911c7
SHA1 73508e8e34dbc95f1010e82c074658c2ccc21966
SHA512 ed5d1a2d064c657135e393276213b2d47f02b999cab3c82d177695819734e1531e10f598282ad25125c4b3b5e0016d1d90b8a2c1b07aa1241a79f38148cd9dc2
SSDEEP 3072:TlKUqM4hlqRkKvgZTYjjJJg5qi3rqop/cOBJgsN/8553a1vy49WkZmuHbA0bL2:14yIKdJg5q8UoN/U34y0Zv7A0bC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14439

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer OpenFileMappingA GetProfileIntA ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedExchange SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA GetProductInfo LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize GetPrivateProfileStructA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomW TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError GetCommandLineW InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW SearchPathA FindResourceW GetSystemTimeAdjustment GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost SetMailslotInfo GetConsoleMode Sleep ExitProcess DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

CharUpperW

Sharing