file[.]exe | Triage™

General

Target
file.exe
Size 146KB
Sample221006-sy682aaafq
SHA256 075f64480786ce35f08c253aaa6f0f58ff64bb34db53d69e30de16b9abb26660
MD5 072d3cfec36cf1dedef7a3148642180c
SHA1 43a13607aa57712d4915f251a3da45adfe80e50c
SHA512 f9b610d40348bbdef488795dfa31b72ea88457e68878714aecff206d3120c79da986adabcbc6caafacc57845caf8bb069828b7938a0fca229a7235710a9097ae
SSDEEP 3072:NL2AoCOLLazElaTVvKQHup1pm1gUvyfb6lxnRAWOsrQSO:NLxYLLatRKXe1EelxRUTS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 146KB

file.exe

IMPHASH 1f58d9074be78e09dcd4a187049ab11d
SHA256 075f64480786ce35f08c253aaa6f0f58ff64bb34db53d69e30de16b9abb26660
MD5 072d3cfec36cf1dedef7a3148642180c
SHA1 43a13607aa57712d4915f251a3da45adfe80e50c
SHA512 f9b610d40348bbdef488795dfa31b72ea88457e68878714aecff206d3120c79da986adabcbc6caafacc57845caf8bb069828b7938a0fca229a7235710a9097ae
SSDEEP 3072:NL2AoCOLLazElaTVvKQHup1pm1gUvyfb6lxnRAWOsrQSO:NLxYLLatRKXe1EelxRUTS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19382

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceW GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP GetQueuedCompletionStatus CopyFileW InterlockedPushEntrySList WriteConsoleA GetBinaryTypeW WriteConsoleOutputA GetCommandLineA VerifyVersionInfoW CreateActCtxA FormatMessageW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexW LocalFlags RtlCaptureContext InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsW InterlockedIncrement GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError SetFilePointer lstrcpynW LoadLibraryA RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoW HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing