file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221019-v92tssabd8
SHA256 f70f26eaa12ece868ecd8e9e62e14e7b7d65fa981fb65f1623a38aed8b6fa708
MD5 8c098029f8b64d75bc2105100edbd24a
SHA1 8aba88bdf122ca07f1c9799b1609fc5590e87da0
SHA512 a6d581d961fd91f77ac128196f44823c55662f3bae11308336b1d376b200be18481f53a4d9c10898553aeb455766303a2db25ab66131b429021daf33ee378af9
SSDEEP 3072:r32bowyAQ1frt41rfLmySNWytG6F9roYGKit+EscfsxNH48VG6o:r3tL1p+rLZSNb1oYDioP2s/YN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 6aeaa3348cde2cdb4a222a2b041de31c
SHA256 f70f26eaa12ece868ecd8e9e62e14e7b7d65fa981fb65f1623a38aed8b6fa708
MD5 8c098029f8b64d75bc2105100edbd24a
SHA1 8aba88bdf122ca07f1c9799b1609fc5590e87da0
SHA512 a6d581d961fd91f77ac128196f44823c55662f3bae11308336b1d376b200be18481f53a4d9c10898553aeb455766303a2db25ab66131b429021daf33ee378af9
SSDEEP 3072:r32bowyAQ1frt41rfLmySNWytG6F9roYGKit+EscfsxNH48VG6o:r3tL1p+rLZSNb1oYDioP2s/YN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44022

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationA GetComputerNameA VerLanguageNameW LocalSize InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthA EnumSystemCodePagesW FindNextFileW CopyFileExA MoveFileWithProgressW VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW IsBadWritePtr FindResourceA GetComputerNameExA GetProcAddress LocalAlloc GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructA GetACP GetProcessAffinityMask GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW WriteConsoleW GetCommandLineW FindFirstChangeNotificationW CreateActCtxA FormatMessageW CreateJobObjectA GetConsoleFontSize GlobalFlags GetCurrentConsoleFont LoadLibraryW InitializeCriticalSection GetStringTypeExA OpenMutexA CancelDeviceWakeupRequest RtlCaptureContext EnterCriticalSection GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange EnumDateFormatsA EnumCalendarInfoA InterlockedExchange InterlockedIncrement GetNamedPipeHandleStateA CreateTimerQueue GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing