file[.]exe | Triage™

General

Target
file.exe
Size 217KB
Sample221017-2fcq5sdffq
SHA256 7ee56613bbe0ced00452fd4cb3582d8b5f27e2a43167db8152719ec4e00c7fee
MD5 aa898543723fc1304b97f8bed92de196
SHA1 7709a2630cd728c19a8b16d16ebd60456c4351a4
SHA512 4a9b8809a0afc6898557e412bba53d1ad6eeb6b957982bf4b7f3a5c0ea955a797c90097eaeae5ac10e43f4a6c28ce2d65dd4bd9c6f35ac7d4a1b3b7838f29f96
SSDEEP 3072:1IAKHwlVmsql+RWdFkLxkSiS4OlCFRYG3lybQa3HulZL3M2ab0DbGT:17KWml+gcLxNiS63Ykesc2hD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 217KB

file.exe

IMPHASH 9111c2b05e717afa2acabbf314a51e79
SHA256 7ee56613bbe0ced00452fd4cb3582d8b5f27e2a43167db8152719ec4e00c7fee
MD5 aa898543723fc1304b97f8bed92de196
SHA1 7709a2630cd728c19a8b16d16ebd60456c4351a4
SHA512 4a9b8809a0afc6898557e412bba53d1ad6eeb6b957982bf4b7f3a5c0ea955a797c90097eaeae5ac10e43f4a6c28ce2d65dd4bd9c6f35ac7d4a1b3b7838f29f96
SSDEEP 3072:1IAKHwlVmsql+RWdFkLxkSiS4OlCFRYG3lybQa3HulZL3M2ab0DbGT:17KWml+gcLxNiS63Ykesc2hD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41222

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA ReadConsoleW GetVolumeInformationA GetComputerNameA VerLanguageNameA LocalFlags InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressW VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadWritePtr FindResourceA GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointW GetOEMCP CreateIoCompletionPort CopyFileA lstrcpynW WriteConsoleW GetCommandLineW GetProfileSectionA WriteConsoleOutputA SearchPathA GetCommandLineA FindFirstChangeNotificationA GetCalendarInfoA GetConsoleTitleA CreateActCtxA FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetStringTypeExA OpenMutexA RtlCaptureContext InterlockedExchange LeaveCriticalSection DeleteFiber InterlockedCompareExchange EnumDateFormatsW EnumCalendarInfoA GetPrivateProfileStructA InterlockedIncrement GetNamedPipeHandleStateW CreateTimerQueue LocalAlloc GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing