file[.]exe | Triage™

General

Target
file.exe
Size 146KB
Sample221006-c1ad3sgbd6
SHA256 014069bf4573069dd7dd52f8778f2a441db40d6aa914508150750a4e2549be0c
MD5 b41eea91a5da56541e24b7e3d9aa8785
SHA1 a8d5deb621ca66b36343e3e96c5157a7c398ae3e
SHA512 7fdfc9854c31c9dcbf2822f33f3c997608b448f44be9dd9836bf7cfe3141ca4b5fed641d8958eef066cd12d6aa2bc91e984d13f1fc2bae14cd1c4a47a2fc4df0
SSDEEP 3072:oQpRqqQhf2GVU/3UNRiIuUg/Ff0C4qru4b3HH20dJHTO:zCq5GaUNRiIuUgBXr53nLfHT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 146KB

file.exe

IMPHASH 56dbf612f54c9ba62f45480e8cc28119
SHA256 014069bf4573069dd7dd52f8778f2a441db40d6aa914508150750a4e2549be0c
MD5 b41eea91a5da56541e24b7e3d9aa8785
SHA1 a8d5deb621ca66b36343e3e96c5157a7c398ae3e
SHA512 7fdfc9854c31c9dcbf2822f33f3c997608b448f44be9dd9836bf7cfe3141ca4b5fed641d8958eef066cd12d6aa2bc91e984d13f1fc2bae14cd1c4a47a2fc4df0
SSDEEP 3072:oQpRqqQhf2GVU/3UNRiIuUg/Ff0C4qru4b3HH20dJHTO:zCq5GaUNRiIuUgBXr53nLfHT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19287

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameA LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceW GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW DeleteVolumeMountPointA GetCPInfo GetQueuedCompletionStatus InterlockedPushEntrySList lstrcpynW WriteConsoleW GetBinaryTypeW WriteConsoleOutputA GetCommandLineA VerifyVersionInfoW CreateActCtxW FormatMessageW GetModuleHandleA EnterCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InterlockedExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedIncrement GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError SetFilePointer CopyFileW LoadLibraryA RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoA HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA LCMapStringW

user32

CharUpperBuffW

advapi32

RevertToSelf

Sharing