file[.]exe | Triage™

General

Target
file.exe
Size 216KB
Sample221017-sma2fscbg6
SHA256 e79c8b87e3e126d0911ef1d7d7bd885641834fd66dfed150b7082ed841df10e3
MD5 2ad4b384c82e82f8a4768b2e8b976133
SHA1 651d010bc5557dd571740547d3c3627d4a908d77
SHA512 640b890c69025586f6e21bf5f2d63ec06025b0a161009fcf430e752175957a3c9e9b1f96ff403f36074e3717d6b0d6a155f33731b06aa82a391a758f43a78454
SSDEEP 3072:OLAfKfSUy+XgNxslEnLhA+xC3CZ2bBgtb891+8k9MyIL1S3VIwKvzJpr:OEfK5jwxsILhFxCY++l4xw5Ap
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 216KB

file.exe

IMPHASH dd18353a93dcfc114eea0ffc1ea62b21
SHA256 e79c8b87e3e126d0911ef1d7d7bd885641834fd66dfed150b7082ed841df10e3
MD5 2ad4b384c82e82f8a4768b2e8b976133
SHA1 651d010bc5557dd571740547d3c3627d4a908d77
SHA512 640b890c69025586f6e21bf5f2d63ec06025b0a161009fcf430e752175957a3c9e9b1f96ff403f36074e3717d6b0d6a155f33731b06aa82a391a758f43a78454
SSDEEP 3072:OLAfKfSUy+XgNxslEnLhA+xC3CZ2bBgtb891+8k9MyIL1S3VIwKvzJpr:OEfK5jwxsILhFxCY++l4xw5Ap
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41238

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA ReadConsoleW GetVolumeInformationA GetComputerNameA VerLanguageNameA LocalFlags InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressW VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceA GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointW GetOEMCP CreateIoCompletionPort CopyFileA lstrcpynW WriteConsoleW GetCommandLineW GetProfileSectionA WriteConsoleOutputA SearchPathA GetCommandLineA FindFirstChangeNotificationA GetCalendarInfoA GetConsoleTitleA CreateActCtxA FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetStringTypeExA OpenMutexA RtlCaptureContext InterlockedExchange LeaveCriticalSection DeleteFiber InterlockedCompareExchange EnumDateFormatsW EnumCalendarInfoA GetPrivateProfileStructA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing