file[.]exe | Triage™

General

Target
file.exe
Size 211KB
Sample221013-n6weaachek
SHA256 a192ddd3ce1caf4b81bee82d8ae8aeee192fdcecc3eb33d69a6c996a9f5ae6ed
MD5 07f8b96789444b3f042eeb0e2a6e51a4
SHA1 2aba230eae1b253ce4a979baa9cd0f1fe8874c9b
SHA512 6cc0c83fcf301dc8d51019b2d554821293de840f62383695e7c90c9dbe6a3bfdfaf34167ec3d5778410cea562500a5741436f0f4bd736ae0a6ffedd196d6e8b5
SSDEEP 3072:86/PBw16sJ4pLpa1KUK5h+Xw0LHoiZmjzD52Dm8RtLKrD54C+0O:8gXPLpa1EeHoiZmjzDFwU5BB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 211KB

file.exe

IMPHASH 7863b1a1f848089f4072e2bddead2fba
SHA256 a192ddd3ce1caf4b81bee82d8ae8aeee192fdcecc3eb33d69a6c996a9f5ae6ed
MD5 07f8b96789444b3f042eeb0e2a6e51a4
SHA1 2aba230eae1b253ce4a979baa9cd0f1fe8874c9b
SHA512 6cc0c83fcf301dc8d51019b2d554821293de840f62383695e7c90c9dbe6a3bfdfaf34167ec3d5778410cea562500a5741436f0f4bd736ae0a6ffedd196d6e8b5
SSDEEP 3072:86/PBw16sJ4pLpa1KUK5h+Xw0LHoiZmjzD52Dm8RtLKrD54C+0O:8gXPLpa1EeHoiZmjzDFwU5BB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41174

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetComputerNameW VerLanguageNameW LocalFlags InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP CreateIoCompletionPort CopyFileA lstrcpynW WriteConsoleA GetCommandLineW GetProfileSectionA ReadConsoleA SearchPathA GetCommandLineA FindFirstChangeNotificationA VerifyVersionInfoW GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA FindResourceA RtlCaptureContext InterlockedCompareExchange LeaveCriticalSection GetPrivateProfileStructW DeleteFiber InterlockedExchange EnumDateFormatsW EnumCalendarInfoA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError WriteConsoleOutputA LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffA

advapi32

SetThreadToken

Sharing