file[.]exe | Triage™

General

Target
file.exe
Size 217KB
Sample221017-v6kfcacffm
SHA256 047591ca2ccc07bd76829f889993e0be9a945791de2d97211bd57a5b63ae1fde
MD5 08e981aad501e2f56c900456ab9c0ae9
SHA1 e212cc704088b4578e94b81048f351815a65571e
SHA512 db6c0a34daefdc368873f70868130885a231bfddf6e7767ab05c2164abb06742c59dcab25fbd0e1ad63cce182714f3574d1d7ef5d9062b5be3a76baaaa607d1f
SSDEEP 3072:q5AdfSkoe/iGHRfgEeZ1L+3myW+8uCZVsg1wmuERQqsvmg8gksvBOv3:qudpsKR4EcL+2yW31wmuLvn8Vsvgv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 217KB

file.exe

IMPHASH dd18353a93dcfc114eea0ffc1ea62b21
SHA256 047591ca2ccc07bd76829f889993e0be9a945791de2d97211bd57a5b63ae1fde
MD5 08e981aad501e2f56c900456ab9c0ae9
SHA1 e212cc704088b4578e94b81048f351815a65571e
SHA512 db6c0a34daefdc368873f70868130885a231bfddf6e7767ab05c2164abb06742c59dcab25fbd0e1ad63cce182714f3574d1d7ef5d9062b5be3a76baaaa607d1f
SSDEEP 3072:q5AdfSkoe/iGHRfgEeZ1L+3myW+8uCZVsg1wmuERQqsvmg8gksvBOv3:qudpsKR4EcL+2yW31wmuLvn8Vsvgv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41222

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA ReadConsoleW GetVolumeInformationA GetComputerNameA VerLanguageNameA LocalFlags InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressW VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceA GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointW GetOEMCP CreateIoCompletionPort CopyFileA lstrcpynW WriteConsoleW GetCommandLineW GetProfileSectionA WriteConsoleOutputA SearchPathA GetCommandLineA FindFirstChangeNotificationA GetCalendarInfoA GetConsoleTitleA CreateActCtxA FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetStringTypeExA OpenMutexA RtlCaptureContext InterlockedExchange LeaveCriticalSection DeleteFiber InterlockedCompareExchange EnumDateFormatsW EnumCalendarInfoA GetPrivateProfileStructA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing