file[.]exe | Triage™

General

Target
file.exe
Size 220KB
Sample221024-wgaqaahhe7
SHA256 ef03306bac9e2ef0d95b2f6a79edf2d2c6a3f7347e20f4f4f36d580eda69d6e2
MD5 124c43157ebd8b07dd64537323354c88
SHA1 4871ed4d1095833b46dc529986a8711eb38867d5
SHA512 3ec9d64e8821ca29afedf8150c3711f330a82f63bb4257fcf34d9beba9a214ab820470020741ea7e4b9247a666476fbdbb2413395034c46a0c88b4e5d56a1895
SSDEEP 3072:BJZnZT/ISBcI4SElpmLh24w76cs25b3Ya1W/x5SVxY7n0zAfMSpI:fZhASqmLhE7vLIz/x5S/g0zAf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 220KB

file.exe

IMPHASH 21427dee5bb0c78a44fe8e154f9d839b
SHA256 ef03306bac9e2ef0d95b2f6a79edf2d2c6a3f7347e20f4f4f36d580eda69d6e2
MD5 124c43157ebd8b07dd64537323354c88
SHA1 4871ed4d1095833b46dc529986a8711eb38867d5
SHA512 3ec9d64e8821ca29afedf8150c3711f330a82f63bb4257fcf34d9beba9a214ab820470020741ea7e4b9247a666476fbdbb2413395034c46a0c88b4e5d56a1895
SSDEEP 3072:BJZnZT/ISBcI4SElpmLh24w76cs25b3Ya1W/x5SVxY7n0zAfMSpI:fZhASqmLhE7vLIz/x5S/g0zAf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44678

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameA LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc FoldStringW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameW GetPrivateProfileStructW GetOEMCP SetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement VerifyVersionInfoA CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo EnterCriticalSection GetPrivateProfileStructA InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

Sharing