file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221011-vx44dsfda4
SHA256 e4d9db2c0a37eb4a6d9e16a1d149d2a3de304bf2058f5a75ddf9027b187761e8
MD5 512f1687b938e673c3b8b05e73e9905f
SHA1 07ec16b0df79c000a7f65eafc2861c9f25369a62
SHA512 6b2e31052eff9aed46be53a3bd98815039cd6cc563e04b527d99ef7324450151641259b82530162b6736983f3f76bae4d3d4c0a7ab99479c3277117d4c132587
SSDEEP 3072:YoSPImZE0KVCLS/Inxt8dk6n8JdVXN2rVNW4pr5SMVORWdhxBUFxO:Y6OtLSgnk8TVXgrVjp5ScOYTUH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 47f3841b8380a704a9ff258e0444ec1d
SHA256 e4d9db2c0a37eb4a6d9e16a1d149d2a3de304bf2058f5a75ddf9027b187761e8
MD5 512f1687b938e673c3b8b05e73e9905f
SHA1 07ec16b0df79c000a7f65eafc2861c9f25369a62
SHA512 6b2e31052eff9aed46be53a3bd98815039cd6cc563e04b527d99ef7324450151641259b82530162b6736983f3f76bae4d3d4c0a7ab99479c3277117d4c132587
SSDEEP 3072:YoSPImZE0KVCLS/Inxt8dk6n8JdVXN2rVNW4pr5SMVORWdhxBUFxO:Y6OtLSgnk8TVXgrVjp5ScOYTUH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40566

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetComputerNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW FindCloseChangeNotification EnumSystemCodePagesW FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalSize DosDateTimeToFileTime DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP CreateIoCompletionPort ReadConsoleA lstrcpynW WriteConsoleA GetBinaryTypeA WriteConsoleOutputA GetCommandLineA CreateActCtxW FormatMessageW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA LocalFlags FindResourceA RtlCaptureContext InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber InterlockedExchange EnumDateFormatsW EnumCalendarInfoA GetConsoleAliasExesLengthW OpenSemaphoreA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError CopyFileW LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing