file[.]exe | Triage™

General

Target
file.exe
Size 359KB
Sample221024-paa9xagda3
SHA256 b03a3978a5e4c0e49c03c2d4262083d3a5275a96c82b59f0850dcc85605ac960
MD5 8500bb28f14c93c43db8087c401175f9
SHA1 e15e4e1f3fdc55ad991642bee8070c3651427191
SHA512 ca1a301a131734ae07dab9f02fc0bfc79410487b5471eec20b450953540a05ecdc49337a7176709296a46cdcaa1c7e2d7cc702b0c63a1b37634b2af36661dadc
SSDEEP 6144:tt6XDuLr/NZ0apCAQ2he1zQ6BJjrl8MPFascrqQpXss/z4oc:tt6XiPr0ap7hUQ6BNrp9ZsO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 359KB

file.exe

IMPHASH 9747979c331a112262ad79c17973b5b5
SHA256 b03a3978a5e4c0e49c03c2d4262083d3a5275a96c82b59f0850dcc85605ac960
MD5 8500bb28f14c93c43db8087c401175f9
SHA1 e15e4e1f3fdc55ad991642bee8070c3651427191
SHA512 ca1a301a131734ae07dab9f02fc0bfc79410487b5471eec20b450953540a05ecdc49337a7176709296a46cdcaa1c7e2d7cc702b0c63a1b37634b2af36661dadc
SSDEEP 6144:tt6XDuLr/NZ0apCAQ2he1zQ6BJjrl8MPFascrqQpXss/z4oc:tt6XiPr0ap7hUQ6BNrp9ZsO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameA LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc FoldStringW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetOEMCP SetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo InterlockedExchange EnterCriticalSection InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA GetPrivateProfileStructW GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing