file[.]exe | Triage™

General

Target
file.exe
Size 212KB
Sample221011-n6wp2sdbd8
SHA256 a1b07ed052e3c86bfb1342bd8f441bea258d8a9dc071e6f0055344ff2e794411
MD5 b39224ee8508f4ec162de7c84647817e
SHA1 c7827ee16f27d0979e2c9ca40d7331abc4690e9e
SHA512 ee07eeb92ff271d6aade87926b19200d0be52763a35c3dccbfeffd22f9c267c78f5fe421c325a43bf77ee6459d10a03a3ceef9c70cded5dae1fd9e7883001022
SSDEEP 3072:gu+Mm+eBx4g/y2EKLNtQNkwMOPqEj5oYpg4Qs2CIdb/doO:3+rJU29LNSNNqi5lC4Qs2bhdo
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 212KB

file.exe

IMPHASH 59de72f24710a4ab3ca7e4fa2f0a3bf4
SHA256 a1b07ed052e3c86bfb1342bd8f441bea258d8a9dc071e6f0055344ff2e794411
MD5 b39224ee8508f4ec162de7c84647817e
SHA1 c7827ee16f27d0979e2c9ca40d7331abc4690e9e
SHA512 ee07eeb92ff271d6aade87926b19200d0be52763a35c3dccbfeffd22f9c267c78f5fe421c325a43bf77ee6459d10a03a3ceef9c70cded5dae1fd9e7883001022
SSDEEP 3072:gu+Mm+eBx4g/y2EKLNtQNkwMOPqEj5oYpg4Qs2CIdb/doO:3+rJU29LNSNNqi5lC4Qs2bhdo
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40518

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesW ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindCloseChangeNotification EnumSystemCodePagesW FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalSize DosDateTimeToFileTime DebugBreak GlobalGetAtomNameA IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP CreateIoCompletionPort InterlockedPopEntrySList lstrcpynW WriteConsoleA GetBinaryTypeA WriteConsoleOutputA GetCommandLineA CreateActCtxW FormatMessageW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexW LocalFlags RtlCaptureContext InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber InterlockedExchange EnumDateFormatsW EnumCalendarInfoA GetConsoleAliasExesLengthW OpenSemaphoreA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError CopyFileW LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing