file[.]exe | Triage™

General

Target
file.exe
Size 218KB
Sample221018-d22qdsece8
SHA256 0aad689d23a3af342eee7f8f25011097adf490a309cdf49fad72201bfe1de3e3
MD5 0de02e0dc3332ab0077137bf16cb2d22
SHA1 8d2478de1ec65e4f73dde07d266ab821e4c9a747
SHA512 531ba363e43b63cf32a38f0f64d8fccce590fc99e2996be833d48dd38a30429408b3733e65d2b0ad1d7f72ab5cfa04c5fbc324579d4a006e6fa6462095b446ec
SSDEEP 3072:LOEvhVw5jOuQdRDVCjL4MocZBDFkFZqzpuRT8C2LkTEPQYBhSJj69zhu5:LPvsERDCL46ZBEqMRT8xLgEPQIUj69
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 218KB

file.exe

IMPHASH 0599a4f6476292b996409694968f0183
SHA256 0aad689d23a3af342eee7f8f25011097adf490a309cdf49fad72201bfe1de3e3
MD5 0de02e0dc3332ab0077137bf16cb2d22
SHA1 8d2478de1ec65e4f73dde07d266ab821e4c9a747
SHA512 531ba363e43b63cf32a38f0f64d8fccce590fc99e2996be833d48dd38a30429408b3733e65d2b0ad1d7f72ab5cfa04c5fbc324579d4a006e6fa6462095b446ec
SSDEEP 3072:LOEvhVw5jOuQdRDVCjL4MocZBDFkFZqzpuRT8C2LkTEPQYBhSJj69zhu5:LPvsERDCL46ZBEqMRT8xLgEPQIUj69
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41302

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA ReadConsoleW GetVolumeInformationA GetComputerNameA VerLanguageNameA LocalFlags InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressW VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadWritePtr FindResourceA GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointW GetOEMCP CreateIoCompletionPort GetProcessAffinityMask GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW WriteConsoleW GetCommandLineW GetProfileSectionA WriteConsoleOutputA SearchPathA GetCommandLineA FindFirstChangeNotificationA GetCalendarInfoA GetConsoleTitleA CreateActCtxA FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetStringTypeExA OpenMutexA RtlCaptureContext InterlockedExchange LeaveCriticalSection DeleteFiber InterlockedCompareExchange EnumDateFormatsW EnumCalendarInfoA GetPrivateProfileStructA InterlockedIncrement GetNamedPipeHandleStateW CreateTimerQueue LocalAlloc GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing