file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221013-jwjwaabcbl
SHA256 c3d2420bd05a15f7ed377358767155675b6c8d5764db93ae370e65caf0ffba97
MD5 b8fa4a8502049a4eeb5f0d877d245340
SHA1 8826f5a2ed98efc2ad6f49b4afda1f687ef579e0
SHA512 49c2bea071ba928542fb0947182b59865e7212ab066ae6a59625811a2e9dd0c04be7f465a9ca12c473e3ea0b8a5f9ec8198193e27c8667fa743b229a36abdfac
SSDEEP 3072:InNGjCSty4jZv2WLDqxSAXO1L6qCraoKNRUQuz82hRYd+mf23sMWWldyp9O:IN+CrifLDqx9JqM3Ko5cdHe3sM1dS9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 85d37ce0ad0f54e9c19dfda5f234c7b8
SHA256 c3d2420bd05a15f7ed377358767155675b6c8d5764db93ae370e65caf0ffba97
MD5 b8fa4a8502049a4eeb5f0d877d245340
SHA1 8826f5a2ed98efc2ad6f49b4afda1f687ef579e0
SHA512 49c2bea071ba928542fb0947182b59865e7212ab066ae6a59625811a2e9dd0c04be7f465a9ca12c473e3ea0b8a5f9ec8198193e27c8667fa743b229a36abdfac
SSDEEP 3072:InNGjCSty4jZv2WLDqxSAXO1L6qCraoKNRUQuz82hRYd+mf23sMWWldyp9O:IN+CrifLDqx9JqM3Ko5cdHe3sM1dS9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40886

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetComputerNameW VerLanguageNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP CreateIoCompletionPort ReadConsoleA lstrcpynW WriteConsoleA GetCommandLineW WriteConsoleOutputA GetCommandLineA CreateActCtxW FormatMessageW GetModuleHandleW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA LocalFlags FindResourceA RtlCaptureContext InterlockedCompareExchange LeaveCriticalSection GetPrivateProfileStructW DeleteFiber EnumDateFormatsW EnumCalendarInfoA InterlockedExchange InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError CopyFileW LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffA

advapi32

SetThreadToken

Sharing