file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample221026-evspksegam
SHA256 01c5f981a0b9995dce8c4f950cd93d8135fedd253d48efc709fdce8ce3e07ae7
MD5 e34de9176ba44850ad213abc57c74fff
SHA1 d131382cf5e48b86c58bbdecdcd1c8a3194ec64f
SHA512 569b192ccc194b867545fe1df772f3958490724f693fd6e6cb17c5545085bd2d3f0b4850c3ad33e37dc2f9e01559f96b86faa475b89fb1dad03f67bee1664705
SSDEEP 3072:Pv/nQ6LhsyAU7tkmULFWU6p5W3WS2G/8jAyc2dRGeotoZZwBzNPWlGp:Pv/Q4sI7tkLcU3mVG0RdP29NZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH b62bd316acc88af39325b14542024bbc
SHA256 01c5f981a0b9995dce8c4f950cd93d8135fedd253d48efc709fdce8ce3e07ae7
MD5 e34de9176ba44850ad213abc57c74fff
SHA1 d131382cf5e48b86c58bbdecdcd1c8a3194ec64f
SHA512 569b192ccc194b867545fe1df772f3958490724f693fd6e6cb17c5545085bd2d3f0b4850c3ad33e37dc2f9e01559f96b86faa475b89fb1dad03f67bee1664705
SSDEEP 3072:Pv/nQ6LhsyAU7tkmULFWU6p5W3WS2G/8jAyc2dRGeotoZZwBzNPWlGp:Pv/Q4sI7tkLcU3mVG0RdP29NZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44614

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationW GetComputerNameA LocalSize InterlockedDecrement SetSystemTimeAdjustment FindNextVolumeA GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleA lstrlenW FindResourceW GetComputerNameExA GetProcAddress GlobalAlloc WriteConsoleW GetFileTime GetConsoleAliasesLengthA GetOEMCP GetProcessAffinityMask GlobalFindAtomA VerifyVersionInfoA CreateActCtxW GetModuleHandleW FindNextVolumeW InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo InterlockedExchange EnterCriticalSection InterlockedCompareExchange EnumCalendarInfoA GetPrivateProfileStructW GetNamedPipeHandleStateA AreFileApisANSI LoadLibraryW GetTickCount SetLastError FoldStringW LoadLibraryA WideCharToMultiByte InterlockedIncrement MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthA

Sharing