file[.]exe | Triage™

General

Target
file.exe
Size 229KB
Sample221024-hx74tsfcbl
SHA256 81dc065d9bbbe3ff88d7d667c933fa4f6f2926f80b279d9d7c0c3b6eec8ba98c
MD5 7ad6507a7b2d29a69212af37f0384968
SHA1 4b626356da19c2b8d9fb7aceb168c276001e9c33
SHA512 ab9ceefcbc4530603dd48558dbe1c2bb17c5c22812582a93b4e5c14b786ec5b0cb8f0ed466f4c20624a9cad0dfc5cb38d4938f3e07414641067b8bde734f739f
SSDEEP 3072:Fvnoyp4ffH/hLD1Kdhly6vBeAcmuf9czAAFs45MIAkw+Zsl:FvLQJLD14hkeqKzAAFs2Mdk
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 229KB

file.exe

IMPHASH 85c2243080c4d639c6b8e81e9e238d45
SHA256 81dc065d9bbbe3ff88d7d667c933fa4f6f2926f80b279d9d7c0c3b6eec8ba98c
MD5 7ad6507a7b2d29a69212af37f0384968
SHA1 4b626356da19c2b8d9fb7aceb168c276001e9c33
SHA512 ab9ceefcbc4530603dd48558dbe1c2bb17c5c22812582a93b4e5c14b786ec5b0cb8f0ed466f4c20624a9cad0dfc5cb38d4938f3e07414641067b8bde734f739f
SSDEEP 3072:Fvnoyp4ffH/hLD1Kdhly6vBeAcmuf9czAAFs45MIAkw+Zsl:FvLQJLD14hkeqKzAAFs2Mdk
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameW LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructA GetACP GetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo EnterCriticalSection GetPrivateProfileStructW InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing