file[.]exe | Triage™

General

Target
file.exe
Size 224KB
Sample221024-paa9xagefp
SHA256 1d8d92e303b53d6b7c7746f818dc6f1de35220295cbf1a2fbeac55a3b152caeb
MD5 0c2f73a635b05db020c8720919bc33c7
SHA1 1f29b0c1b9d900bb9f8facd064672a32318dff30
SHA512 18f5c8dc00c03cb9af44ec1e48e219e07ebebc4d0b75461d769d4baa63ce00033b3311b98767ef370cddfe5e6f6f6880bc2116c77cc9b6ed2c9d1578581a6caf
SSDEEP 3072:1aenqd+psiTUlELA9brYl6akZ5Zozbg8wnNLk2TwCL9wPDF0:oeFLLA9/YlnkqI8wn+2Twa9wPDF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH 3517a3c748c8bb1487de3354b9418a05
SHA256 1d8d92e303b53d6b7c7746f818dc6f1de35220295cbf1a2fbeac55a3b152caeb
MD5 0c2f73a635b05db020c8720919bc33c7
SHA1 1f29b0c1b9d900bb9f8facd064672a32318dff30
SHA512 18f5c8dc00c03cb9af44ec1e48e219e07ebebc4d0b75461d769d4baa63ce00033b3311b98767ef370cddfe5e6f6f6880bc2116c77cc9b6ed2c9d1578581a6caf
SSDEEP 3072:1aenqd+psiTUlELA9brYl6akZ5Zozbg8wnNLk2TwCL9wPDF0:oeFLLA9/YlnkqI8wn+2Twa9wPDF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44886

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameA LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc FoldStringW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructW GetOEMCP SetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo EnterCriticalSection GetPrivateProfileStructA InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

Sharing