file[.]exe | Triage™

General

Target
file.exe
Size 234KB
Sample221006-bk3v1sgcdq
SHA256 c2f09f0013bdeef6be567760c14c6da99d4866e30745a1eb07b878f31185eded
MD5 144c0c4931f17127641cf43ee2c4a871
SHA1 f6b50d106033321e5fa4149f78095081de77d1b1
SHA512 c94242e008f21a2c8d4f038f3a930064458865cd0d680b16e3b00379fe227c3de0c434088b19e896c0d023423f78ef18eba29d2d575f7be2adc3ea792f1bd2a7
SSDEEP 6144:CSdEI+3sE+eXOvx6tbZrLP7ZW13NbHLmb:CSd83slEuxgbZnPNWzHLU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 234KB

file.exe

IMPHASH 56dbf612f54c9ba62f45480e8cc28119
SHA256 c2f09f0013bdeef6be567760c14c6da99d4866e30745a1eb07b878f31185eded
MD5 144c0c4931f17127641cf43ee2c4a871
SHA1 f6b50d106033321e5fa4149f78095081de77d1b1
SHA512 c94242e008f21a2c8d4f038f3a930064458865cd0d680b16e3b00379fe227c3de0c434088b19e896c0d023423f78ef18eba29d2d575f7be2adc3ea792f1bd2a7
SSDEEP 6144:CSdEI+3sE+eXOvx6tbZrLP7ZW13NbHLmb:CSd83slEuxgbZnPNWzHLU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19287

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameA LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceW GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW DeleteVolumeMountPointA GetCPInfo GetQueuedCompletionStatus InterlockedPushEntrySList lstrcpynW WriteConsoleW GetBinaryTypeW WriteConsoleOutputA GetCommandLineA VerifyVersionInfoW CreateActCtxW FormatMessageW GetModuleHandleA EnterCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InterlockedExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedIncrement GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError SetFilePointer CopyFileW LoadLibraryA RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoA HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA LCMapStringW

user32

CharUpperBuffW

advapi32

RevertToSelf

Sharing