file[.]exe | Triage™

General

Target
file.exe
Size 340KB
Sample221011-vx44dsfda3
SHA256 aa2b5d5f5e91f673c6ad75dfdf35c33ebda273b5ca96d5d4897cb791ba23d16a
MD5 9f244d6da7f20c0b8b0deed3fb52b6e0
SHA1 6bf3b82c6c7027633fb99e00f7aba41e5dbf9b25
SHA512 3cd384ff19f35e58dfa3ebe0fe48058cb258de001d7c7defb10dc2637744f98092e4b4875dacd9c95ea3909506192cd8f7c68de1d54b2707f4e7ada17a251bc0
SSDEEP 6144:CcRDLScK8GVnOaxEuZxl5gdBAV7NGCuUMm/SQ4j:CcRDJKjnOCLl5gdyiCui+j
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH 2466deca3b013302337885751cf37be4
SHA256 aa2b5d5f5e91f673c6ad75dfdf35c33ebda273b5ca96d5d4897cb791ba23d16a
MD5 9f244d6da7f20c0b8b0deed3fb52b6e0
SHA1 6bf3b82c6c7027633fb99e00f7aba41e5dbf9b25
SHA512 3cd384ff19f35e58dfa3ebe0fe48058cb258de001d7c7defb10dc2637744f98092e4b4875dacd9c95ea3909506192cd8f7c68de1d54b2707f4e7ada17a251bc0
SSDEEP 6144:CcRDLScK8GVnOaxEuZxl5gdBAV7NGCuUMm/SQ4j:CcRDJKjnOCLl5gdyiCui+j
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40438

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetComputerNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW FindCloseChangeNotification EnumSystemCodePagesW FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalSize DosDateTimeToFileTime DebugBreak GlobalGetAtomNameA IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP CreateIoCompletionPort CopyFileW lstrcpynW ReadConsoleA GetBinaryTypeA WriteConsoleOutputA GetCommandLineA CreateActCtxW FormatMessageW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA LocalFlags FindResourceA RtlCaptureContext InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber InterlockedExchange EnumDateFormatsW EnumCalendarInfoA GetConsoleAliasExesLengthW OpenSemaphoreA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError WriteConsoleA LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing