file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221019-zapseafgd9
SHA256 a6b448a05262a3112ec7c82fc6863795ee80260bed2d1cd00caa60dee6c4a6c1
MD5 3dcd298510f81ff8811e754e1f9e5241
SHA1 d15c3999105adfe6ee044745dd9ce521b2adf291
SHA512 156800593233e1a54a1954f8c9163a24ec49aad23dc04fa034be280565c20496aa3ff57d56d7d6a5c7cb1c758528768875a54de1a802573b4e121bd9b49a2397
SSDEEP 3072:DOGLjuCVTpHjqy1Lp1MzkWFLKIxg+huY9sdt85aCB78EtdydWvpxy:DOOC+m6LjMzkYGE7iL68WdydWvp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 8744a72964a12ed0959c705ce56ace95
SHA256 a6b448a05262a3112ec7c82fc6863795ee80260bed2d1cd00caa60dee6c4a6c1
MD5 3dcd298510f81ff8811e754e1f9e5241
SHA1 d15c3999105adfe6ee044745dd9ce521b2adf291
SHA512 156800593233e1a54a1954f8c9163a24ec49aad23dc04fa034be280565c20496aa3ff57d56d7d6a5c7cb1c758528768875a54de1a802573b4e121bd9b49a2397
SSDEEP 3072:DOGLjuCVTpHjqy1Lp1MzkWFLKIxg+huY9sdt85aCB78EtdydWvpxy:DOOC+m6LjMzkYGE7iL68WdydWvp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44310

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameW LocalSize InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthA EnumSystemCodePagesW FindNextFileW CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW IsBadWritePtr FindResourceA GetComputerNameExA GetProcAddress LocalAlloc GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructA GetACP GetProcessAffinityMask GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW WriteConsoleW GetCommandLineA FindFirstChangeNotificationW CreateActCtxA FormatMessageW CreateJobObjectA GetConsoleFontSize GlobalFlags GetCurrentConsoleFont LoadLibraryW InitializeCriticalSection GetStringTypeExA OpenMutexA CancelDeviceWakeupRequest RtlCaptureContext EnterCriticalSection GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange EnumDateFormatsA EnumCalendarInfoA InterlockedExchange InterlockedIncrement GetNamedPipeHandleStateA CreateTimerQueue GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing