file[.]exe | Triage™

General

Target
file.exe
Size 210KB
Sample221013-mrnv8acaa7
SHA256 48d3035798125cf7588715684a5d0c3bb511ce4bca580885ff49cc0b2e062ea6
MD5 39792a91e940d5844f02dfa970de4f5e
SHA1 e3340f21c396f47d4badd95d1c21cc537c96f27e
SHA512 ff1e02c1af90d6d34174eeefb1fb5b395a5f0c6770feb566241f4ae908c75af8fabadc1d7200bb4bf2a6a5b20e7e8ad98b819087e6db7be890799bfd49469475
SSDEEP 3072:1a5zFljZMFzSAiLOmWzdojK58rSFjDCoJoVAv3EYXwvTY/7rFbO:1uHm+LOmWC9rQuoyVu3ESwvTY/7Z
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 210KB

file.exe

IMPHASH 7863b1a1f848089f4072e2bddead2fba
SHA256 48d3035798125cf7588715684a5d0c3bb511ce4bca580885ff49cc0b2e062ea6
MD5 39792a91e940d5844f02dfa970de4f5e
SHA1 e3340f21c396f47d4badd95d1c21cc537c96f27e
SHA512 ff1e02c1af90d6d34174eeefb1fb5b395a5f0c6770feb566241f4ae908c75af8fabadc1d7200bb4bf2a6a5b20e7e8ad98b819087e6db7be890799bfd49469475
SSDEEP 3072:1a5zFljZMFzSAiLOmWzdojK58rSFjDCoJoVAv3EYXwvTY/7rFbO:1uHm+LOmWC9rQuoyVu3ESwvTY/7Z
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41206

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetComputerNameW VerLanguageNameW LocalFlags InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP CreateIoCompletionPort CopyFileA lstrcpynW WriteConsoleA GetCommandLineW GetProfileSectionA ReadConsoleA SearchPathA GetCommandLineA FindFirstChangeNotificationA VerifyVersionInfoW GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA FindResourceA RtlCaptureContext InterlockedCompareExchange LeaveCriticalSection GetPrivateProfileStructW DeleteFiber InterlockedExchange EnumDateFormatsW EnumCalendarInfoA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError WriteConsoleOutputA LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffA

advapi32

SetThreadToken

Sharing