file[.]exe | Triage™

General

Target
file.exe
Size 218KB
Sample221013-qsdcnaffh8
SHA256 afad70661bb540b1a19bc2ce76ccbad746ec46e4702b05cd09318ef65828a180
MD5 86db39b4cafa85b6adea5c9eba98cec6
SHA1 22059c8e98bff14f07180992716ffd242ed0dae8
SHA512 de000aa6ae0fe379a83549e833b91a77760a9c4203b62972c89b1e33e6aa5f76895a65b35f5e8c874bc6348121f399397639326c299c02fb82904d4fc49cc591
SSDEEP 3072:z00pudPr9P9szcLrNsXnIrBf+VgHpbY6qHFm0bDhqzOSt8mCO:zEOcLpsXIrK6qlXqzTjC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 218KB

file.exe

IMPHASH a1b373e7ca3fda2ce442bdf8c326bfda
SHA256 afad70661bb540b1a19bc2ce76ccbad746ec46e4702b05cd09318ef65828a180
MD5 86db39b4cafa85b6adea5c9eba98cec6
SHA1 22059c8e98bff14f07180992716ffd242ed0dae8
SHA512 de000aa6ae0fe379a83549e833b91a77760a9c4203b62972c89b1e33e6aa5f76895a65b35f5e8c874bc6348121f399397639326c299c02fb82904d4fc49cc591
SSDEEP 3072:z00pudPr9P9szcLrNsXnIrBf+VgHpbY6qHFm0bDhqzOSt8mCO:zEOcLpsXIrK6qlXqzTjC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41430

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetComputerNameW VerLanguageNameW LocalFlags InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetOEMCP CreateIoCompletionPort CopyFileA lstrcpynW WriteConsoleA GetCommandLineW GetProfileSectionA WriteConsoleOutputA ReadConsoleA GetCommandLineA FindFirstChangeNotificationA VerifyVersionInfoW GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA FindResourceA RtlCaptureContext InterlockedCompareExchange LeaveCriticalSection GetPrivateProfileStructA DeleteFiber InterlockedExchange EnumDateFormatsW EnumCalendarInfoA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError SearchPathA LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffA

advapi32

SetThreadToken

Sharing