file[.]exe | Triage™

General

Target
file.exe
Size 146KB
Sample221006-2fx23sbcbn
SHA256 4c70bde948c86aa5a4697f1ac9285a611dbeb7f965e1c14b5a3e31a8ee856d8c
MD5 2cef6f29fb5ace1adc062e403a3fb65b
SHA1 febe262e803779050710a958d569a28371ccdaf6
SHA512 ea82a9aa04380cf63818ed4effadfeb8fbbd0e77a4fb456b95b992b2ebc9c585998ecf4f6e47dcce0358f1de55b82191555199cd271dfe58c50bd697f3620857
SSDEEP 3072:Qd2OvML9dpuElXYLo/FdZNbVGKBrbR/O:QdcL9dpAo/FdvVxBXR/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 146KB

file.exe

IMPHASH 91316e1f4f56e120a2e86d72baa8caac
SHA256 4c70bde948c86aa5a4697f1ac9285a611dbeb7f965e1c14b5a3e31a8ee856d8c
MD5 2cef6f29fb5ace1adc062e403a3fb65b
SHA1 febe262e803779050710a958d569a28371ccdaf6
SHA512 ea82a9aa04380cf63818ed4effadfeb8fbbd0e77a4fb456b95b992b2ebc9c585998ecf4f6e47dcce0358f1de55b82191555199cd271dfe58c50bd697f3620857
SSDEEP 3072:Qd2OvML9dpuElXYLo/FdZNbVGKBrbR/O:QdcL9dpAo/FdvVxBXR/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19430

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindNextChangeNotification EnumSystemCodePagesW FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceW GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP GetQueuedCompletionStatus InterlockedPushEntrySList lstrcpynW WriteConsoleA GetBinaryTypeW WriteConsoleOutputA GetCommandLineA VerifyVersionInfoW CreateActCtxA FormatMessageW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexW LocalFlags RtlCaptureContext InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsW InterlockedIncrement GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError SetFilePointer CopyFileW LoadLibraryA RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoW HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing