file[.]exe | Triage™

General

Target
file.exe
Size 216KB
Sample221011-vypebsfdb9
SHA256 0d667e530d241fdd59d5bc2d75f0583797a79859dd86bddd8045e578acd4ea73
MD5 a048add8d5b5556abafea91d5bd1f28e
SHA1 4d7a5da2ff554f69a02c1c7aae3e59e9aef1b7b3
SHA512 ebb94bd7408c856b2c2e38dfed1b789edf15cebecf8d4822b73d698185a55b937d46c2b5c6238ef9e06f0009f8c3c525112de05850486339d6ba07ce09b38adf
SSDEEP 3072:O9dPQOZEw3+1tZLycmiWMfdt8d9zcVvbOKX2mUL83qs+Ts5Sxesr+SO:OY+3+1bLpdWMfI9AOMUL6qW5S/J
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 216KB

file.exe

IMPHASH 47f3841b8380a704a9ff258e0444ec1d
SHA256 0d667e530d241fdd59d5bc2d75f0583797a79859dd86bddd8045e578acd4ea73
MD5 a048add8d5b5556abafea91d5bd1f28e
SHA1 4d7a5da2ff554f69a02c1c7aae3e59e9aef1b7b3
SHA512 ebb94bd7408c856b2c2e38dfed1b789edf15cebecf8d4822b73d698185a55b937d46c2b5c6238ef9e06f0009f8c3c525112de05850486339d6ba07ce09b38adf
SSDEEP 3072:O9dPQOZEw3+1tZLycmiWMfdt8d9zcVvbOKX2mUL83qs+Ts5Sxesr+SO:OY+3+1bLpdWMfI9AOMUL6qW5S/J
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40566

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetComputerNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW FindCloseChangeNotification EnumSystemCodePagesW FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalSize DosDateTimeToFileTime DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP CreateIoCompletionPort ReadConsoleA lstrcpynW WriteConsoleA GetBinaryTypeA WriteConsoleOutputA GetCommandLineA CreateActCtxW FormatMessageW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA LocalFlags FindResourceA RtlCaptureContext InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber InterlockedExchange EnumDateFormatsW EnumCalendarInfoA GetConsoleAliasExesLengthW OpenSemaphoreA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError CopyFileW LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing