file[.]exe | Triage™

General

Target
file.exe
Size 225KB
Sample221024-qb3k8aghbl
SHA256 a6fc1815043d9d25d17bcb3fd9895d3fa34e5b3c2bd230dd62b43742b225e9c2
MD5 53f9a90d4ae949ca32237645bd9441bb
SHA1 34c2153f1fc5e9685b0ac9f0cd6a863c47236a13
SHA512 0240688010b19ff18df09a5b1aeb77cedd8ddd1bb9dd6d698541597364d4630d2c4ad2187bc98f6bfdc8622d2ed1781444991664660e942f5b1393ec33fcb1b8
SSDEEP 3072:FRj8DRdEdsrHlxOLWVy26niG5NCAqYKms9eb4rFYGD7VYK0RVK:zjxjLWE2qiHAqIs92GFYGD7VR0RV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 225KB

file.exe

IMPHASH 3517a3c748c8bb1487de3354b9418a05
SHA256 a6fc1815043d9d25d17bcb3fd9895d3fa34e5b3c2bd230dd62b43742b225e9c2
MD5 53f9a90d4ae949ca32237645bd9441bb
SHA1 34c2153f1fc5e9685b0ac9f0cd6a863c47236a13
SHA512 0240688010b19ff18df09a5b1aeb77cedd8ddd1bb9dd6d698541597364d4630d2c4ad2187bc98f6bfdc8622d2ed1781444991664660e942f5b1393ec33fcb1b8
SSDEEP 3072:FRj8DRdEdsrHlxOLWVy26niG5NCAqYKms9eb4rFYGD7VYK0RVK:zjxjLWE2qiHAqIs92GFYGD7VR0RV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44886

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameA LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc FoldStringW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructW GetOEMCP SetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo EnterCriticalSection GetPrivateProfileStructA InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

Sharing