file[.]exe | Triage™

General

Target
file.exe
Size 142KB
Sample220930-nsvwlaedan
SHA256 5b7de919ed62842c19b188ae6a3f917a628efb2282831a3e0235bba7aab2999c
MD5 f721cd041409cbc09811c259a16fad84
SHA1 4d4cafe40f6456a3022efdb52a2564cee6ad83f4
SHA512 d0abd0165fedac6c546c2baff1c9580df1f2c4896bd667376fd03fcb5cff92d3b191bfe5737cecb9e90109096e4abb6b125336b83af0549bf645f069ac7aa7a5
SSDEEP 1536:4neBiUFEdTzhMh/H0MRp9BlqRVVqwshC2wdELM3MTMv1YH4XyMigUlJdMp/qfioI:8QiUmZkHlqR6vhC2wdtzw4Xy/X2q6o
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 142KB

file.exe

IMPHASH 1076d4eb9f464e21562d6629e831473b
SHA256 5b7de919ed62842c19b188ae6a3f917a628efb2282831a3e0235bba7aab2999c
MD5 f721cd041409cbc09811c259a16fad84
SHA1 4d4cafe40f6456a3022efdb52a2564cee6ad83f4
SHA512 d0abd0165fedac6c546c2baff1c9580df1f2c4896bd667376fd03fcb5cff92d3b191bfe5737cecb9e90109096e4abb6b125336b83af0549bf645f069ac7aa7a5
SSDEEP 1536:4neBiUFEdTzhMh/H0MRp9BlqRVVqwshC2wdELM3MTMv1YH4XyMigUlJdMp/qfioI:8QiUmZkHlqR6vhC2wdtzw4Xy/X2q6o
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14439

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer OpenFileMappingA GetProfileIntA ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedExchange SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA GetProductInfo LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize GetPrivateProfileStructA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomW TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError GetCommandLineW InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW SearchPathA FindResourceW GetSystemTimeAdjustment GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost SetMailslotInfo GetConsoleMode Sleep ExitProcess DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

CharUpperW

Sharing