file[.]exe | Triage™

General

Target
file.exe
Size 216KB
Sample221026-n8lmvsffcr
SHA256 2b80c06d3c307456871fbaca4331f290bd2c4522b9fe3a4d7e3d630d7f6847f8
MD5 65779f324c913cd16e1b848e49711d9e
SHA1 78822ebd9efd34a5601732d694ca4bbcfc900109
SHA512 3d5de07dee2748869685dc747225113f205259cb0273ebfd2ebd9e6457e2ed50f1c64433cf6fcfd7dd62b7938baf00e152e347ca1f323e78784283e90c7ec727
SSDEEP 3072:vGTBvU2I1gROpqiLYDSE2456zPOPrpgc5hF4pbpRvYVFbU2PHx:v6BvB6LeSE2Pkpgy4ZpBqbU2P
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 216KB

file.exe

IMPHASH f27fd8a9795bd6c85f249a50b57cd4fe
SHA256 2b80c06d3c307456871fbaca4331f290bd2c4522b9fe3a4d7e3d630d7f6847f8
MD5 65779f324c913cd16e1b848e49711d9e
SHA1 78822ebd9efd34a5601732d694ca4bbcfc900109
SHA512 3d5de07dee2748869685dc747225113f205259cb0273ebfd2ebd9e6457e2ed50f1c64433cf6fcfd7dd62b7938baf00e152e347ca1f323e78784283e90c7ec727
SSDEEP 3072:vGTBvU2I1gROpqiLYDSE2456zPOPrpgc5hF4pbpRvYVFbU2PHx:v6BvB6LeSE2Pkpgy4ZpBqbU2P
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41622

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationW GetComputerNameA LocalSize InterlockedDecrement SetSystemTimeAdjustment FindNextVolumeA GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleA lstrlenW FindResourceW GetComputerNameExA GetProcAddress GlobalAlloc WriteConsoleW GetFileTime GetConsoleAliasesLengthA GetOEMCP GetProcessAffinityMask GlobalFindAtomW VerifyVersionInfoA CreateActCtxW GetModuleHandleW FindNextVolumeW InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleFontSize InterlockedExchange EnterCriticalSection InterlockedCompareExchange EnumCalendarInfoA GetPrivateProfileStructW GetNamedPipeHandleStateW AreFileApisANSI LoadLibraryW GetTickCount SetLastError FoldStringW LoadLibraryA WideCharToMultiByte InterlockedIncrement MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

gdi32

GetCharWidthA

Sharing