file[.]exe | Triage™

General

Target
file.exe
Size 217KB
Sample221017-3pegrsdfb4
SHA256 1180fe04ddcfbdbf01119558b96acb61e2767bc09edb48cc4f2cff37edeb627c
MD5 300165c8a37a54a93e1e642223c51fb9
SHA1 85041f864b576143beddf3d4c548039c76c29ba1
SHA512 6c4ebef1af6c37ca6f93b7e7eed11d16f53b63b1ab179e5b2c364f0dce4cb6f4142a63029ac66e5b9932b1b6173982dfebe19538c5898988d9f14448bb94991a
SSDEEP 3072:yEEShVEtjOs6zkmN76CLfDm6n6ZkF00fApc40KTMuIUJ4yVeiXUv:ypSAnmNtLfi6nMdeoIUJ4yVFE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 217KB

file.exe

IMPHASH 0599a4f6476292b996409694968f0183
SHA256 1180fe04ddcfbdbf01119558b96acb61e2767bc09edb48cc4f2cff37edeb627c
MD5 300165c8a37a54a93e1e642223c51fb9
SHA1 85041f864b576143beddf3d4c548039c76c29ba1
SHA512 6c4ebef1af6c37ca6f93b7e7eed11d16f53b63b1ab179e5b2c364f0dce4cb6f4142a63029ac66e5b9932b1b6173982dfebe19538c5898988d9f14448bb94991a
SSDEEP 3072:yEEShVEtjOs6zkmN76CLfDm6n6ZkF00fApc40KTMuIUJ4yVeiXUv:ypSAnmNtLfi6nMdeoIUJ4yVFE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41302

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA ReadConsoleW GetVolumeInformationA GetComputerNameA VerLanguageNameA LocalFlags InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressW VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadWritePtr FindResourceA GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointW GetOEMCP CreateIoCompletionPort GetProcessAffinityMask GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW WriteConsoleW GetCommandLineW GetProfileSectionA WriteConsoleOutputA SearchPathA GetCommandLineA FindFirstChangeNotificationA GetCalendarInfoA GetConsoleTitleA CreateActCtxA FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetStringTypeExA OpenMutexA RtlCaptureContext InterlockedExchange LeaveCriticalSection DeleteFiber InterlockedCompareExchange EnumDateFormatsW EnumCalendarInfoA GetPrivateProfileStructA InterlockedIncrement GetNamedPipeHandleStateW CreateTimerQueue LocalAlloc GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing