file[.]exe | Triage™

General

Target
file.exe
Size 210KB
Sample221031-18g1wsdfd4
SHA256 6800c1d53afa07d3e6effc02b6e2bd7eaf468ffedc24a28ed4c4d77dc683e222
MD5 020e8450ece76faa6ece03b8b9fc6841
SHA1 e00c7fe964abe588a0cd7a89217f5377a67eec31
SHA512 91ef5a3af3532ca487dabcf49258ddaac72ab97375ec92d03771ad5cc7a6694ebad5267f29e1f70bc8d647e311b1fd60071975f2bec2642959328e348d4cf8ff
SSDEEP 3072:ij/pBKu61SeLYOyR0xLoUL06gf5R8HxVVi+z9QY844QI44ySk7GsBRhx:ijBBU1xLYsLoUIcH0+zmY844P1rs1
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 210KB

file.exe

IMPHASH 74991961699762f407de2e3e2f029b34
SHA256 6800c1d53afa07d3e6effc02b6e2bd7eaf468ffedc24a28ed4c4d77dc683e222
MD5 020e8450ece76faa6ece03b8b9fc6841
SHA1 e00c7fe964abe588a0cd7a89217f5377a67eec31
SHA512 91ef5a3af3532ca487dabcf49258ddaac72ab97375ec92d03771ad5cc7a6694ebad5267f29e1f70bc8d647e311b1fd60071975f2bec2642959328e348d4cf8ff
SSDEEP 3072:ij/pBKu61SeLYOyR0xLoUL06gf5R8HxVVi+z9QY844QI44ySk7GsBRhx:ijBBU1xLYsLoUIcH0+zmY844P1rs1
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37862

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalSize InterlockedExchange SetSystemTimeAdjustment GetNumaProcessorNode GetConsoleAliasExesLengthW EnumSystemCodePagesA TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW SetWaitableTimer GetVersionExA FindResourceW OpenEventA SearchPathA GetComputerNameA CallNamedPipeA GetProcAddress GlobalAlloc FoldStringA SetFileTime GetConsoleAliasesLengthA GetSystemWindowsDirectoryA GetACP SetProcessAffinityMask GlobalFindAtomW VerifyVersionInfoA CreateActCtxW FindNextVolumeA InterlockedIncrement GetComputerNameW CancelDeviceWakeupRequest GetConsoleFontSize InterlockedCompareExchange GetPrivateProfileStructW EnumCalendarInfoW EnterCriticalSection InterlockedDecrement GetNamedPipeHandleStateW AreFileApisANSI GetTickCount SetLastError WriteConsoleW GetVolumeInformationA GetThreadPriority LoadLibraryW Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthA

advapi32

SetThreadToken

Sharing