file[.]exe | Triage™

General

Target
file.exe
Size 224KB
Sample221013-x8c56aahem
SHA256 c3c4c60c656d5a971bef10a24f6edbc129115934b40b029ced445dac28a7a862
MD5 fb0a1d02c9a7faa91cccc9a87df257c6
SHA1 ee0cc18522225a3b87b25ded6c3fdf5fa20f66f2
SHA512 2aa0ad52ce7bcb780dbd8717dbc1f56812268227e4e15abff3cee9a8d202b88d1df589c4fb823b22d27799353382202f765a525361fd02c32b2021a1fe7697cd
SSDEEP 3072:JhTv4wubl7ZCUzLj4JAeNkaqV5obvbeEOBVHXZz6JgM:J13g73LjNeNkgb2NXx6K
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH a7a46e8048e804699368d22fff8c2cfd
SHA256 c3c4c60c656d5a971bef10a24f6edbc129115934b40b029ced445dac28a7a862
MD5 fb0a1d02c9a7faa91cccc9a87df257c6
SHA1 ee0cc18522225a3b87b25ded6c3fdf5fa20f66f2
SHA512 2aa0ad52ce7bcb780dbd8717dbc1f56812268227e4e15abff3cee9a8d202b88d1df589c4fb823b22d27799353382202f765a525361fd02c32b2021a1fe7697cd
SSDEEP 3072:JhTv4wubl7ZCUzLj4JAeNkaqV5obvbeEOBVHXZz6JgM:J13g73LjNeNkgb2NXx6K
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41542

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA ReadConsoleA GetVolumeInformationA GetComputerNameW VerLanguageNameA LocalFlags InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressW VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetOEMCP CreateIoCompletionPort CopyFileA lstrcpynW WriteConsoleA GetCommandLineW MoveFileWithProgressA GetProfileSectionA WriteConsoleOutputA SearchPathA GetCommandLineA FindFirstChangeNotificationA VerifyVersionInfoW GetCalendarInfoA GetConsoleTitleA CreateActCtxA FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetComputerNameA GetStringTypeExA OpenMutexA FindResourceA RtlCaptureContext LeaveCriticalSection GetPrivateProfileStructA DeleteFiber EnumDateFormatsW EnumCalendarInfoA InterlockedExchange InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

CharUpperBuffA

Sharing