file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample221026-jttygafbcq
SHA256 3c2b6d59b3c9a3168f5b0ebab694f8ba4353f068c550717d32c80b2086ba67b2
MD5 ac263c06e966b53c2cfa5c361af9acbe
SHA1 a4e04f27ceccd14a64c525fbba8566755d44bd93
SHA512 1ea08cb9c2a021fd7d1c2569f6e1f4d5abbe23fc6e461d47154400e989c07515f1c1884a810db11aae1fe471e9611e4535dee5a850ac86d6babd12d948ec7085
SSDEEP 3072:FvqW06LNAyAw7WlTLzGr6j5cBZgmd6SY59lFtaZ7glGHVpFdMPkSTp:FvqbMAE7WVLyrkZx8pFd81
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH b62bd316acc88af39325b14542024bbc
SHA256 3c2b6d59b3c9a3168f5b0ebab694f8ba4353f068c550717d32c80b2086ba67b2
MD5 ac263c06e966b53c2cfa5c361af9acbe
SHA1 a4e04f27ceccd14a64c525fbba8566755d44bd93
SHA512 1ea08cb9c2a021fd7d1c2569f6e1f4d5abbe23fc6e461d47154400e989c07515f1c1884a810db11aae1fe471e9611e4535dee5a850ac86d6babd12d948ec7085
SSDEEP 3072:FvqW06LNAyAw7WlTLzGr6j5cBZgmd6SY59lFtaZ7glGHVpFdMPkSTp:FvqbMAE7WVLyrkZx8pFd81
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44614

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationW GetComputerNameA LocalSize InterlockedDecrement SetSystemTimeAdjustment FindNextVolumeA GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleA lstrlenW FindResourceW GetComputerNameExA GetProcAddress GlobalAlloc WriteConsoleW GetFileTime GetConsoleAliasesLengthA GetOEMCP GetProcessAffinityMask GlobalFindAtomA VerifyVersionInfoA CreateActCtxW GetModuleHandleW FindNextVolumeW InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo InterlockedExchange EnterCriticalSection InterlockedCompareExchange EnumCalendarInfoA GetPrivateProfileStructW GetNamedPipeHandleStateA AreFileApisANSI LoadLibraryW GetTickCount SetLastError FoldStringW LoadLibraryA WideCharToMultiByte InterlockedIncrement MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthA

Sharing