file[.]exe | Triage™

General

Target
file.exe
Size 263KB
Sample221031-j6pjhsade8
SHA256 31aa80533b54d1d2ca01fe2dbebc2bbda3bf908717d09c994d7ffaa4354fcfe2
MD5 0d7a6e7a633bcfe0071680df68001655
SHA1 5f92f99b7b9a7cc99c4123d70c8d01d1496aac9f
SHA512 505c6823fce4710fbdfa170225c986b193ea2ea50d5141b5c47da698e671f3a9e396b2ec077692ce416deceb4ec3ae77137309c9a3a836ec6b520dca36720e15
SSDEEP 6144:5OqT5wGLqi9WGe9F41GR45/73cCbGFGqFBLx:5Oy3ui9WGG4164aCKFGqFBLx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 263KB

file.exe

IMPHASH b5cb56872f2603365a837da07dc2a268
SHA256 31aa80533b54d1d2ca01fe2dbebc2bbda3bf908717d09c994d7ffaa4354fcfe2
MD5 0d7a6e7a633bcfe0071680df68001655
SHA1 5f92f99b7b9a7cc99c4123d70c8d01d1496aac9f
SHA512 505c6823fce4710fbdfa170225c986b193ea2ea50d5141b5c47da698e671f3a9e396b2ec077692ce416deceb4ec3ae77137309c9a3a836ec6b520dca36720e15
SSDEEP 6144:5OqT5wGLqi9WGe9F41GR45/73cCbGFGqFBLx:5Oy3ui9WGG4164aCKFGqFBLx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37414

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetComputerNameA LocalSize InterlockedExchange SetSystemTimeAdjustment GetNumaProcessorNode GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExW MoveFileWithProgressW VerifyVersionInfoW LocalLock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleA lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW SetWaitableTimer GetVersionExA FindResourceA GetComputerNameExW WriteConsoleW SearchPathA GetThreadPriority CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc FoldStringA GetFileTime GetConsoleAliasesLengthA GetOEMCP SetProcessAffinityMask GlobalFindAtomW VerifyVersionInfoA CreateActCtxA FindNextVolumeA CancelDeviceWakeupRequest LocalUnlock GetConsoleFontSize InterlockedCompareExchange GetPrivateProfileStructW EnumCalendarInfoA EnterCriticalSection InterlockedDecrement GetNamedPipeHandleStateW AreFileApisANSI GetTickCount SetLastError OpenEventA LoadLibraryW InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA DeleteFileA

gdi32

GetCharWidthA

Sharing