file[.]exe | Triage™

General

Target
file.exe
Size 233KB
Sample221006-g5f5msggdr
SHA256 8a8b801b11bf955c8342399aab087bb89202fa7626759349d0290e753b4cb1e7
MD5 a59994f1b18506032863d28916fc65c4
SHA1 e46d05918842bccd065ed7d3bf0f1fb2868da585
SHA512 b1461914557c763c2ca3cc271f7669e4e8092f42bea6292201645752ae4e41bfafc4a2109f58419da688933c442cbb9746822ef50f91e025702c4abe7ba77040
SSDEEP 3072:bgWM68e++sHLPtw/JFZ+fJ6sStT9E37dDvoIplSSW2mFhjHeKuroVJdnVnntgQBV:kc+rV+AJEK/pB+sDUPdVntR2D
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 233KB

file.exe

IMPHASH 2c84c37cdeeaa37f20107db6fa2cc69b
SHA256 8a8b801b11bf955c8342399aab087bb89202fa7626759349d0290e753b4cb1e7
MD5 a59994f1b18506032863d28916fc65c4
SHA1 e46d05918842bccd065ed7d3bf0f1fb2868da585
SHA512 b1461914557c763c2ca3cc271f7669e4e8092f42bea6292201645752ae4e41bfafc4a2109f58419da688933c442cbb9746822ef50f91e025702c4abe7ba77040
SSDEEP 3072:bgWM68e++sHLPtw/JFZ+fJ6sStT9E37dDvoIplSSW2mFhjHeKuroVJdnVnntgQBV:kc+rV+AJEK/pB+sDUPdVntR2D
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19287

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameA LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceW GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW DeleteVolumeMountPointA GetOEMCP GetQueuedCompletionStatus InterlockedPushEntrySList lstrcpynW WriteConsoleW GetBinaryTypeW WriteConsoleOutputA GetCommandLineA VerifyVersionInfoW CreateActCtxW FormatMessageW GetModuleHandleA EnterCriticalSection GetStringTypeExW OpenMutexW RtlCaptureContext InterlockedExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd EnumDateFormatsW InterlockedIncrement GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError SetFilePointer CopyFileW LoadLibraryA RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoA HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA LCMapStringW

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing