file[.]exe | Triage™

General

Target
file.exe
Size 145KB
Sample221006-aclq4agbgr
SHA256 78ecccb9b319e86bf8e487077038b0aeaa660aaa6b45c7b366b5c2e329396cfd
MD5 ded774599495952cf3f2bb275c1c4bf6
SHA1 4df4bf89eac691d4d6c72600ebc9f03a85f31b63
SHA512 6b660e996f7750f65016f178339ae97a580c0180cb9327031b750139a27b91fe814d23178c8e12c57ba221c34e4644048eeaeed477c83586f768ba0bcd91417f
SSDEEP 3072:Egp6M+hfvUGlYlPWZvAOGO2F1xUbk35d/ZuDqu9LO:PBaUpWATGkJdB8Z
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 145KB

file.exe

IMPHASH 56dbf612f54c9ba62f45480e8cc28119
SHA256 78ecccb9b319e86bf8e487077038b0aeaa660aaa6b45c7b366b5c2e329396cfd
MD5 ded774599495952cf3f2bb275c1c4bf6
SHA1 4df4bf89eac691d4d6c72600ebc9f03a85f31b63
SHA512 6b660e996f7750f65016f178339ae97a580c0180cb9327031b750139a27b91fe814d23178c8e12c57ba221c34e4644048eeaeed477c83586f768ba0bcd91417f
SSDEEP 3072:Egp6M+hfvUGlYlPWZvAOGO2F1xUbk35d/ZuDqu9LO:PBaUpWATGkJdB8Z
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19287

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameA LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceW GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW DeleteVolumeMountPointA GetCPInfo GetQueuedCompletionStatus InterlockedPushEntrySList lstrcpynW WriteConsoleW GetBinaryTypeW WriteConsoleOutputA GetCommandLineA VerifyVersionInfoW CreateActCtxW FormatMessageW GetModuleHandleA EnterCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InterlockedExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedIncrement GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError SetFilePointer CopyFileW LoadLibraryA RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoA HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA LCMapStringW

user32

CharUpperBuffW

advapi32

RevertToSelf

Sharing