file[.]exe | Triage™

General

Target
file.exe
Size 224KB
Sample221024-pav93sgegl
SHA256 d3e2d1735fd4e06bba0d2d8a606617fb852d858b1cf38d641080a9b788d525a8
MD5 4beb319bc2d7cb4ad5c22fefb3252320
SHA1 c06266539e531720a379c2791dd51d75fa9acf9f
SHA512 403b60df95a82cc066fc75543a6d5cbdb167a71569af95b432e7b13e3d6322217dd6ba6f51a9302e7af55aece503db128a1a2f16540f90a08584e192404b45a9
SSDEEP 3072:M9NncdvFs643lwQLMB2HEl36s575ZlnAi3dNBtKp2PoMLR6cAvQgJ8uqbnEQ+Ek:ONy4LzH+3t57l3Ty2RdBgJ8uWE6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH 3517a3c748c8bb1487de3354b9418a05
SHA256 d3e2d1735fd4e06bba0d2d8a606617fb852d858b1cf38d641080a9b788d525a8
MD5 4beb319bc2d7cb4ad5c22fefb3252320
SHA1 c06266539e531720a379c2791dd51d75fa9acf9f
SHA512 403b60df95a82cc066fc75543a6d5cbdb167a71569af95b432e7b13e3d6322217dd6ba6f51a9302e7af55aece503db128a1a2f16540f90a08584e192404b45a9
SSDEEP 3072:M9NncdvFs643lwQLMB2HEl36s575ZlnAi3dNBtKp2PoMLR6cAvQgJ8uqbnEQ+Ek:ONy4LzH+3t57l3Ty2RdBgJ8uWE6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44886

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameA LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc FoldStringW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructW GetOEMCP SetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo EnterCriticalSection GetPrivateProfileStructA InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

Sharing