file[.]exe | Triage™

General

Target
file.exe
Size 380KB
Sample221024-fx5btsegem
SHA256 1ccb015a66c2fcda0f09dadcd22b7d5eaac24565a75e67292677e2c488455ab6
MD5 e2dd660a47fabd0fcb5c537896f49a9a
SHA1 6570d3c3bf5340309bd88c9005018f5be1c2703a
SHA512 4cf988573e63d526fe8c3049b81bb4ec770702442f87f799a2b3f1b796fb77228e266498101469864bd3f34ae68b324426ae59eeb2ad263821e5174e77ad9a3b
SSDEEP 6144:A9FDVLKz2BX2x02oqKGre4U58MRoAPJeYeHBm9QnGRn6lxghK68yBCNtk:A9FR46X2xprKGr9U58DAPJ6HwOS6i8yB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 380KB

file.exe

IMPHASH 85c2243080c4d639c6b8e81e9e238d45
SHA256 1ccb015a66c2fcda0f09dadcd22b7d5eaac24565a75e67292677e2c488455ab6
MD5 e2dd660a47fabd0fcb5c537896f49a9a
SHA1 6570d3c3bf5340309bd88c9005018f5be1c2703a
SHA512 4cf988573e63d526fe8c3049b81bb4ec770702442f87f799a2b3f1b796fb77228e266498101469864bd3f34ae68b324426ae59eeb2ad263821e5174e77ad9a3b
SSDEEP 6144:A9FDVLKz2BX2x02oqKGre4U58MRoAPJeYeHBm9QnGRn6lxghK68yBCNtk:A9FR46X2xprKGr9U58DAPJ6HwOS6i8yB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameW LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructA GetACP GetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo EnterCriticalSection GetPrivateProfileStructW InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing