file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221024-fs459seef4
SHA256 d7bc52bfd21c433eb2962eef00cab24e4411c23d62a6507f4650ebc29f6e2725
MD5 dcffaf7ba7a1e41b2053ddf63b1076d5
SHA1 a9284a337094608217ca9202e082eda811953ca3
SHA512 fe6112a06db817777eba678e874699ff9056cd953d20b93047d0f4c4e5062d4c4d40bdac3f25f3b5e3e185f8da2e6a48bbe8844a4e25a33c5bacf9eb7bfdc595
SSDEEP 3072:mTkfLp42yVWXLVJTefF4b6vDmleUf5OvELlyXMvRbQRQIUlir7E:mT2GSLVJqNoiDmTBIEZy85eTZH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 85c2243080c4d639c6b8e81e9e238d45
SHA256 d7bc52bfd21c433eb2962eef00cab24e4411c23d62a6507f4650ebc29f6e2725
MD5 dcffaf7ba7a1e41b2053ddf63b1076d5
SHA1 a9284a337094608217ca9202e082eda811953ca3
SHA512 fe6112a06db817777eba678e874699ff9056cd953d20b93047d0f4c4e5062d4c4d40bdac3f25f3b5e3e185f8da2e6a48bbe8844a4e25a33c5bacf9eb7bfdc595
SSDEEP 3072:mTkfLp42yVWXLVJTefF4b6vDmleUf5OvELlyXMvRbQRQIUlir7E:mT2GSLVJqNoiDmTBIEZy85eTZH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameW LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructA GetACP GetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo EnterCriticalSection GetPrivateProfileStructW InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing