file[.]exe | Triage™

General

Target
file.exe
Size 209KB
Sample221026-mtd4ssfecr
SHA256 121d31bcfc3b11b2579a0483ed8b62e145372e4e64aeecb9a9a5c4f237126d7f
MD5 a75593592eb1bfa60538297e006041f7
SHA1 3f13aa103b123145cffd57e6ab18d3b0511867d6
SHA512 8860d60861015ca490c8aba2bd28bf4a30c613dc7eca1c7fa4c642f0955c840ec9249f0146e1288fad3da93dc39f551cff571985a1a64f13478d3f7970d7c69c
SSDEEP 3072:QMYDRe0p+x6xULWTDwb5HIVASczsUQ1a8hp5IhShGPLLtsx:QfDRe9LWTDkKLvthTIgAHts
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 209KB

file.exe

IMPHASH 56729843176125a72f589dd23c046182
SHA256 121d31bcfc3b11b2579a0483ed8b62e145372e4e64aeecb9a9a5c4f237126d7f
MD5 a75593592eb1bfa60538297e006041f7
SHA1 3f13aa103b123145cffd57e6ab18d3b0511867d6
SHA512 8860d60861015ca490c8aba2bd28bf4a30c613dc7eca1c7fa4c642f0955c840ec9249f0146e1288fad3da93dc39f551cff571985a1a64f13478d3f7970d7c69c
SSDEEP 3072:QMYDRe0p+x6xULWTDwb5HIVASczsUQ1a8hp5IhShGPLLtsx:QfDRe9LWTDkKLvthTIgAHts
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41446

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationW GetComputerNameA LocalSize InterlockedDecrement SetSystemTimeAdjustment FindNextVolumeA GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleA lstrlenW FindResourceW GetComputerNameExA GetProcAddress GlobalAlloc WriteConsoleW GetFileTime GetConsoleAliasesLengthA GetOEMCP GetProcessAffinityMask GlobalFindAtomW VerifyVersionInfoA CreateActCtxW GetModuleHandleW FindNextVolumeW InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleFontSize InterlockedExchange EnterCriticalSection InterlockedCompareExchange EnumCalendarInfoA GetPrivateProfileStructW GetNamedPipeHandleStateW AreFileApisANSI LoadLibraryW GetTickCount SetLastError FoldStringW LoadLibraryA WideCharToMultiByte InterlockedIncrement MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthA

Sharing