file[.]exe | Triage™

General

Target
file.exe
Size 276KB
Sample221006-2m8gdsbab4
SHA256 0cf0ecae153842e1f4b497e76547828e120d9d9e25d66ba4b59259ca9fb7abe4
MD5 cd60d75a88a3e9690ee183143a1d5572
SHA1 b8ee3725eed6cb92afddd0b22e12501943cee38b
SHA512 54cc23affb1ff37628beb96860b0e0207e09748574cad39ca85219e2a70fc1a8115bf70fa6eeac5fa80a96a10c26faaaec0238716ab6aa8a61491b161fb61d26
SSDEEP 6144:sOGLNDLEVN5G5dx+gxK2V0cKo5vErYTo2iq+9J:sOGJ2N5EQUKo8rYToDq+j
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 276KB

file.exe

IMPHASH 91316e1f4f56e120a2e86d72baa8caac
SHA256 0cf0ecae153842e1f4b497e76547828e120d9d9e25d66ba4b59259ca9fb7abe4
MD5 cd60d75a88a3e9690ee183143a1d5572
SHA1 b8ee3725eed6cb92afddd0b22e12501943cee38b
SHA512 54cc23affb1ff37628beb96860b0e0207e09748574cad39ca85219e2a70fc1a8115bf70fa6eeac5fa80a96a10c26faaaec0238716ab6aa8a61491b161fb61d26
SSDEEP 6144:sOGLNDLEVN5G5dx+gxK2V0cKo5vErYTo2iq+9J:sOGJ2N5EQUKo8rYToDq+j
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19430

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindNextChangeNotification EnumSystemCodePagesW FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceW GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP GetQueuedCompletionStatus InterlockedPushEntrySList lstrcpynW WriteConsoleA GetBinaryTypeW WriteConsoleOutputA GetCommandLineA VerifyVersionInfoW CreateActCtxA FormatMessageW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexW LocalFlags RtlCaptureContext InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsW InterlockedIncrement GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError SetFilePointer CopyFileW LoadLibraryA RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoW HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing