file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample220930-pkgvfaedfp
SHA256 be4bd8e091b3e92e1b31d71e58f7aa531db1f25eee8aeeb4df34f7f60801df61
MD5 96a1e2218bcaaccb6253ddd9a776c0c7
SHA1 4f299a000601a02f60f61f837fd3cc3c3c6aa37f
SHA512 80822068cbe476be333c7d0822791c5954c9e7f10e489bd895abde7b48023fbc02dc303348ed994b5c17cba6104c0fa9c9b6ee257025906183b48304391d0378
SSDEEP 3072:pHjvUsyFwYfwtRzY2dq4637jeDtb+pRmGaM9CodKnJjS0JzWSElOpDeX4ttcHMZQ:J9GwYf0PV638tERFTQjxa1ALZsKRO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH e55f916797a160691fe0449a7695abd0
SHA256 be4bd8e091b3e92e1b31d71e58f7aa531db1f25eee8aeeb4df34f7f60801df61
MD5 96a1e2218bcaaccb6253ddd9a776c0c7
SHA1 4f299a000601a02f60f61f837fd3cc3c3c6aa37f
SHA512 80822068cbe476be333c7d0822791c5954c9e7f10e489bd895abde7b48023fbc02dc303348ed994b5c17cba6104c0fa9c9b6ee257025906183b48304391d0378
SSDEEP 3072:pHjvUsyFwYfwtRzY2dq4637jeDtb+pRmGaM9CodKnJjS0JzWSElOpDeX4ttcHMZQ:J9GwYf0PV638tERFTQjxa1ALZsKRO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14327

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer OpenFileMappingA GetProfileIntA ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedExchange SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA GetProductInfo LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize GetPrivateProfileStructA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomW TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError GetCommandLineW InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageW GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW SearchPathA FindResourceW GetSystemTimeAdjustment InterlockedCompareExchange GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost SetMailslotInfo GetConsoleMode Sleep ExitProcess DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

CharUpperA

Sharing