file[.]exe | Triage™

General

Target
file.exe
Size 358KB
Sample221024-nrpyysgdfm
SHA256 407312c530750f0320b643a45763bba006d313cefa8df72f463ec836d3f9de08
MD5 381e4c7a1710e50685d70d5c8f64bf0f
SHA1 3238069f1f6784fc4a2bab012639e2a8f137b2a6
SHA512 2f9ff2926deaadde24c4fdcd2e0372df3d4769010c4f9b41ed584a5ffda73dc748873fb54fdcaa719037426c52dff4d4355f7b7389937db134ade90d27f20a44
SSDEEP 6144:Av6/B0LPN7gIFcZucmc9irChTWRNk5VP1ySqYXlnpTIU:Av6/mxMIFc/mc9icqRq9ySDXln
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 358KB

file.exe

IMPHASH 9747979c331a112262ad79c17973b5b5
SHA256 407312c530750f0320b643a45763bba006d313cefa8df72f463ec836d3f9de08
MD5 381e4c7a1710e50685d70d5c8f64bf0f
SHA1 3238069f1f6784fc4a2bab012639e2a8f137b2a6
SHA512 2f9ff2926deaadde24c4fdcd2e0372df3d4769010c4f9b41ed584a5ffda73dc748873fb54fdcaa719037426c52dff4d4355f7b7389937db134ade90d27f20a44
SSDEEP 6144:Av6/B0LPN7gIFcZucmc9irChTWRNk5VP1ySqYXlnpTIU:Av6/mxMIFc/mc9icqRq9ySDXln
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameA LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc FoldStringW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetOEMCP SetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo InterlockedExchange EnterCriticalSection InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA GetPrivateProfileStructW GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing