file[.]exe | Triage™

General

Target
file.exe
Size 217KB
Sample221017-lbxmrabefm
SHA256 dec9e33b973d5bfef9532939bfe873bdffbd47509d0bd8e76d5c5d56c2f9b65b
MD5 25efbe95bd70af6f7f20eec01cec2f99
SHA1 a1832484fdd7372ea52c402bfee8f02849c910e1
SHA512 31e4746bff6cd34f0518f20800febfeb51732ba6f00ac57e81f1ad7e3ffb4898a17a370ce0fde202a257a2baefe6964312bb0a67bfe57888c4fbcff341ba8bd6
SSDEEP 3072:7+rnvCiEDyyM4dJeo2LkTyhgNGHZkn95r9ro1ngggi/Otte65AIZPMa0fIx:7wnLn34DsLkuhgdnJoa34lfI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 217KB

file.exe

IMPHASH a3c97fa5f0a5b13ca3bdd3a61387336e
SHA256 dec9e33b973d5bfef9532939bfe873bdffbd47509d0bd8e76d5c5d56c2f9b65b
MD5 25efbe95bd70af6f7f20eec01cec2f99
SHA1 a1832484fdd7372ea52c402bfee8f02849c910e1
SHA512 31e4746bff6cd34f0518f20800febfeb51732ba6f00ac57e81f1ad7e3ffb4898a17a370ce0fde202a257a2baefe6964312bb0a67bfe57888c4fbcff341ba8bd6
SSDEEP 3072:7+rnvCiEDyyM4dJeo2LkTyhgNGHZkn95r9ro1ngggi/Otte65AIZPMa0fIx:7wnLn34DsLkuhgdnJoa34lfI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41238

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA ReadConsoleW GetVolumeInformationA GetComputerNameW VerLanguageNameA LocalFlags InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressW VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceA GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointW GetOEMCP CreateIoCompletionPort CopyFileA lstrcpynW WriteConsoleW GetCommandLineW MoveFileWithProgressA GetProfileSectionA WriteConsoleOutputA SearchPathA GetCommandLineA FindFirstChangeNotificationA VerifyVersionInfoW GetCalendarInfoA GetConsoleTitleA CreateActCtxA FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetComputerNameA GetStringTypeExA OpenMutexA RtlCaptureContext InterlockedExchange LeaveCriticalSection DeleteFiber InterlockedCompareExchange EnumDateFormatsW EnumCalendarInfoA GetPrivateProfileStructA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing