file[.]exe | Triage™

General

Target
file.exe
Size 224KB
Sample221013-rqphkshcck
SHA256 c33b1dbeaa20452b6ad8917b46bb1ca1a9891c7606e2dc7e37f3074218dbe103
MD5 2632994c08e439daa59cc1baa4888da7
SHA1 9ae918942189bafb7929edaec58c6bdcc46455dd
SHA512 9615912eabbaae33372aa36247000687977e0e7d221817e068c2b9874810fda06ab211e1df8445105375b65c7f56c6dcd7fce974f6c5d7cb80416deb3c5ce691
SSDEEP 3072:tWMF6bv1ZEdH2d6LqEVzKYElnbHpIikfD9qGToHoeYgAx+O:tJF6LHQrLqazKYEln/gqGTe3YgAo
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH fd35832937d651249671064807c2696d
SHA256 c33b1dbeaa20452b6ad8917b46bb1ca1a9891c7606e2dc7e37f3074218dbe103
MD5 2632994c08e439daa59cc1baa4888da7
SHA1 9ae918942189bafb7929edaec58c6bdcc46455dd
SHA512 9615912eabbaae33372aa36247000687977e0e7d221817e068c2b9874810fda06ab211e1df8445105375b65c7f56c6dcd7fce974f6c5d7cb80416deb3c5ce691
SSDEEP 3072:tWMF6bv1ZEdH2d6LqEVzKYElnbHpIikfD9qGToHoeYgAx+O:tJF6LHQrLqazKYEln/gqGTe3YgAo
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41606

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetComputerNameW VerLanguageNameW LocalFlags InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetOEMCP CreateIoCompletionPort CopyFileA lstrcpynW WriteConsoleA GetCommandLineW GetProfileSectionA WriteConsoleOutputA ReadConsoleA GetCommandLineA FindFirstChangeNotificationA VerifyVersionInfoW GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA FindResourceA RtlCaptureContext InterlockedCompareExchange LeaveCriticalSection GetPrivateProfileStructA DeleteFiber InterlockedExchange EnumDateFormatsW EnumCalendarInfoA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError SearchPathA LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

CharUpperBuffA

advapi32

SetThreadToken

Sharing