file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221019-pp2qeafff2
SHA256 11a66a01ad5bf1a78af73a05f167e8f1c202545f6d980524666f0bf91e6a654d
MD5 d7122e4fc5f066a0846aa01e7d95d7c8
SHA1 54110c784d1ae3e32a598f7190fbc4b6691f46da
SHA512 873d83962d17bde3fd5d1a9bdd041878dd77de5106362796dfbff51c828d10ead8887f942b2c6b3c7180e985c1446256e1733923edbdb764af2440125cef3c1c
SSDEEP 6144:i4nspoRTLKLtaM7K5/f0yHOU/FP8fohlAS:i4siKZX721HOUdl7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 85ca0db7eb796b99f8334fe393a75bff
SHA256 11a66a01ad5bf1a78af73a05f167e8f1c202545f6d980524666f0bf91e6a654d
MD5 d7122e4fc5f066a0846aa01e7d95d7c8
SHA1 54110c784d1ae3e32a598f7190fbc4b6691f46da
SHA512 873d83962d17bde3fd5d1a9bdd041878dd77de5106362796dfbff51c828d10ead8887f942b2c6b3c7180e985c1446256e1733923edbdb764af2440125cef3c1c
SSDEEP 6144:i4nspoRTLKLtaM7K5/f0yHOU/FP8fohlAS:i4siKZX721HOUdl7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43974

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationA GetComputerNameA VerLanguageNameW LocalSize InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthA EnumSystemCodePagesW FindNextFileA CopyFileExA MoveFileWithProgressW VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW IsBadWritePtr FindResourceA GetComputerNameExA GetProcAddress LocalAlloc GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetACP GetProcessAffinityMask GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW WriteConsoleW GetCommandLineW FindFirstChangeNotificationW CreateActCtxA FormatMessageW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont LoadLibraryW InitializeCriticalSection GetStringTypeExA OpenMutexA LocalCompact RtlCaptureContext LeaveCriticalSection DeleteFiber InterlockedCompareExchange EnumDateFormatsA EnumCalendarInfoA InterlockedExchange GetPrivateProfileStructA InterlockedIncrement GetNamedPipeHandleStateA CreateTimerQueue GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing