file[.]exe | Triage™

General

Target
file.exe
Size 220KB
Sample221003-c76e4acgd5
SHA256 ff7942d7c23d47e9925f87cfa6b372b8f444eae95a0d40372a0b2e6ce374f4f2
MD5 f5944917897881a5b9d957a16e54d8ff
SHA1 23147802f1d1c7aef06b6409dfc74dc364a7ee8b
SHA512 994c03bb5f739f1af81bb3cac3af3a87c346c67a8022f29be191e126d5b4d39df313813ca251ba7a50370e62c8f3fc1126033dfa9a109a1e3c90a127c9ddf98c
SSDEEP 3072:WgJuaOR+ZsZkh1PIggk6OR6M0rWRpgnikyBpsIFAaDx70t6/AojuY3sm0P+f:AcGkXIfk6OR6M0ridk8S870t6EYcm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 220KB

file.exe

IMPHASH d4ecb5bf1b9676d3f03f2d27772d0a50
SHA256 ff7942d7c23d47e9925f87cfa6b372b8f444eae95a0d40372a0b2e6ce374f4f2
MD5 f5944917897881a5b9d957a16e54d8ff
SHA1 23147802f1d1c7aef06b6409dfc74dc364a7ee8b
SHA512 994c03bb5f739f1af81bb3cac3af3a87c346c67a8022f29be191e126d5b4d39df313813ca251ba7a50370e62c8f3fc1126033dfa9a109a1e3c90a127c9ddf98c
SSDEEP 3072:WgJuaOR+ZsZkh1PIggk6OR6M0rWRpgnikyBpsIFAaDx70t6/AojuY3sm0P+f:AcGkXIfk6OR6M0ridk8S870t6EYcm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14055

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA InterlockedPushEntrySList GetConsoleAliasesW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameA LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeA FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameW IsBadWritePtr FindResourceA GetComputerNameExW GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA CopyFileA lstrcpynA WriteConsoleW GetBinaryTypeA WriteConsoleOutputW GetCommandLineA InterlockedIncrement CreateActCtxW FormatMessageA LeaveCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber EnumDateFormatsA InterlockedCompareExchange GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError SetMailslotInfo HeapWalk SetFilePointer GetConsoleMode LCMapStringW GetModuleHandleW Sleep ExitProcess GetLastError MoveFileA DeleteFileA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

CharUpperBuffW

winhttp

WinHttpCreateUrl

Sharing