file[.]exe | Triage™

General

Target
file.exe
Size 234KB
Sample221119-gcwdvsbf4w
SHA256 9158b433505974c8a6db1f168c19604f60e46ed79f6981d8dbd42d49c1078a98
MD5 620df8965f528754a08a978b67f31e67
SHA1 3c607ca2e52cf34611736d5ee3530ab3ad87e742
SHA512 730259b3df0294dde2d2eca07ac2fe0a7fc0b9d54719fb4df745b0826428a1b73b8f801c0c5f013eb7cacfa0f5b46dbb8163f98491ff0b7c26ceaff629a0ffb6
SSDEEP 6144:L4ARM8aDXqQhylCuSWhQzL2pJH+m30CK2W1:/RMRDXlyILWhQzAH+m30CK2W
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 234KB

file.exe

IMPHASH 19e0e0a97efc31b1e39a2bb2ebdd6fe7
SHA256 9158b433505974c8a6db1f168c19604f60e46ed79f6981d8dbd42d49c1078a98
MD5 620df8965f528754a08a978b67f31e67
SHA1 3c607ca2e52cf34611736d5ee3530ab3ad87e742
SHA512 730259b3df0294dde2d2eca07ac2fe0a7fc0b9d54719fb4df745b0826428a1b73b8f801c0c5f013eb7cacfa0f5b46dbb8163f98491ff0b7c26ceaff629a0ffb6
SSDEEP 6144:L4ARM8aDXqQhylCuSWhQzL2pJH+m30CK2W1:/RMRDXlyILWhQzAH+m30CK2W
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36671

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW AssignProcessToJobObject InitializeCriticalSection SetFilePointer GetCurrentThreadId GetCurrentProcessId GetFileSizeEx SetEndOfFile GetFileAttributesExW AddAtomW FreeConsole MultiByteToWideChar GetModuleHandleA GetProcAddress Sleep RtlUnwind RaiseException GetCommandLineA GetLastError HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

comdlg32

ChooseColorW CommDlgExtendedError ChooseFontW PageSetupDlgW GetOpenFileNameW PrintDlgExW PrintDlgW ReplaceTextW

advapi32

AdjustTokenPrivileges RegQueryValueExA RegDeleteKeyA LookupPrivilegeValueA OpenProcessToken RegOpenKeyExA RegCloseKey GetUserNameA RegCreateKeyA RegSetValueA

comctl32

ImageList_SetBkColor ImageList_Create ImageList_Destroy InitCommonControlsEx ImageList_ReplaceIcon CreateToolbarEx ImageList_Remove

Sharing