file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221024-kw5y7affa5
SHA256 25d5251f5a35257d227e539b7a2e8dfd9b85e805682a502f63473bb8766450b8
MD5 3ca50c386d6f14ecec7e56dbd0181f7e
SHA1 927492eac979eb9745924d5d50028a5c92b8ba36
SHA512 c2c94a4ccc899f32fe4125eb5e64850b207a0b30c09daa1adf61af11d5f557ac13a5f58fc2a8e4dc729ed4a548db6b3b08244d7c449be751d76e2686b7c34987
SSDEEP 3072:xNYuZF4YTRtr7LLUhETIh6pLeESKlr6bj22KnjiEjmKv3L/1gOb:xNb/FLLUuTq8jSKlebCicmg7/1g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 85c2243080c4d639c6b8e81e9e238d45
SHA256 25d5251f5a35257d227e539b7a2e8dfd9b85e805682a502f63473bb8766450b8
MD5 3ca50c386d6f14ecec7e56dbd0181f7e
SHA1 927492eac979eb9745924d5d50028a5c92b8ba36
SHA512 c2c94a4ccc899f32fe4125eb5e64850b207a0b30c09daa1adf61af11d5f557ac13a5f58fc2a8e4dc729ed4a548db6b3b08244d7c449be751d76e2686b7c34987
SSDEEP 3072:xNYuZF4YTRtr7LLUhETIh6pLeESKlr6bj22KnjiEjmKv3L/1gOb:xNb/FLLUuTq8jSKlebCicmg7/1g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameW LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructA GetACP GetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo EnterCriticalSection GetPrivateProfileStructW InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing