file[.]exe | Triage™

General

Target
file.exe
Size 221KB
Sample221025-cfkpbabcej
SHA256 6fda10fd46c5cf1375364644abc6ea6e70a96f778ea3c627df2bef231d625c48
MD5 4358f355364342a3633bd7dabd486b68
SHA1 97996eb97c3e836555e841329e44ba57c1951427
SHA512 fbb0a5b2f9f9471ccc414e7a49ab38abfa7ea9694bfecc4eb6710164e70877c247d21278f8043db91116a8f9b638e208ed092a398a67986f0842657040cb7c89
SSDEEP 3072:Fbn575diMTRMfQLy2wY6t5ZNDU/O2c3OHzaOyd8vEz8Bq1oUvyhExaUv6:FbZGcLmYyaO2c3GGovEz8BKo90a
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 221KB

file.exe

IMPHASH a2a488c1ba888cbce9fc8f3bca83fd16
SHA256 6fda10fd46c5cf1375364644abc6ea6e70a96f778ea3c627df2bef231d625c48
MD5 4358f355364342a3633bd7dabd486b68
SHA1 97996eb97c3e836555e841329e44ba57c1951427
SHA512 fbb0a5b2f9f9471ccc414e7a49ab38abfa7ea9694bfecc4eb6710164e70877c247d21278f8043db91116a8f9b638e208ed092a398a67986f0842657040cb7c89
SSDEEP 3072:Fbn575diMTRMfQLy2wY6t5ZNDU/O2c3OHzaOyd8vEz8Bq1oUvyhExaUv6:FbZGcLmYyaO2c3GGovEz8BKo90a
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44406

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleW GetVolumeInformationW GetComputerNameA LocalSize InterlockedDecrement SetSystemTimeAdjustment FindNextVolumeA GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress GlobalAlloc FoldStringW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameW GetOEMCP GetProcessAffinityMask GlobalFindAtomA MoveFileWithProgressA VerifyVersionInfoA CreateActCtxW FindNextVolumeW GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo EnterCriticalSection InterlockedCompareExchange EnumCalendarInfoA InterlockedExchange GetPrivateProfileStructW GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte InterlockedIncrement MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

Sharing