file[.]exe | Triage™

General

Target
file.exe
Size 217KB
Sample221018-c1vp1sebb6
SHA256 3cbc356cb38e9df1f3c1712c97be3c429dc5b99e6adf839f1fbe273d5a2d9c41
MD5 445f0092a117d50065a8602232a67918
SHA1 49df7770d04b69413b2165d6e3c21f136350ff28
SHA512 53d3df7d9358eb570dff1c13e0f7ac2b8a2b5520a30b048eaf95d0608ddb534032973da23977830aab9a5dc8012be59c08ec72d23dd66b5b99b8a30b01e31f92
SSDEEP 3072:CVEPhVzZjOWqC88n+2ULgALtPk+kFO0mWGplV17fL94iA3S/X8PUTiZuj:C2P/188ULgEtPuGpXXtkS/sN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 217KB

file.exe

IMPHASH 0599a4f6476292b996409694968f0183
SHA256 3cbc356cb38e9df1f3c1712c97be3c429dc5b99e6adf839f1fbe273d5a2d9c41
MD5 445f0092a117d50065a8602232a67918
SHA1 49df7770d04b69413b2165d6e3c21f136350ff28
SHA512 53d3df7d9358eb570dff1c13e0f7ac2b8a2b5520a30b048eaf95d0608ddb534032973da23977830aab9a5dc8012be59c08ec72d23dd66b5b99b8a30b01e31f92
SSDEEP 3072:CVEPhVzZjOWqC88n+2ULgALtPk+kFO0mWGplV17fL94iA3S/X8PUTiZuj:C2P/188ULgEtPuGpXXtkS/sN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41302

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA ReadConsoleW GetVolumeInformationA GetComputerNameA VerLanguageNameA LocalFlags InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressW VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadWritePtr FindResourceA GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointW GetOEMCP CreateIoCompletionPort GetProcessAffinityMask GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW WriteConsoleW GetCommandLineW GetProfileSectionA WriteConsoleOutputA SearchPathA GetCommandLineA FindFirstChangeNotificationA GetCalendarInfoA GetConsoleTitleA CreateActCtxA FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetStringTypeExA OpenMutexA RtlCaptureContext InterlockedExchange LeaveCriticalSection DeleteFiber InterlockedCompareExchange EnumDateFormatsW EnumCalendarInfoA GetPrivateProfileStructA InterlockedIncrement GetNamedPipeHandleStateW CreateTimerQueue LocalAlloc GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing