file[.]exe | Triage™

General

Target
file.exe
Size 209KB
Sample221101-dhwp2agddr
SHA256 c0b1c26018d8b0c37ccbb586dca827fbb81029914cfca2a19d32e490c9950a75
MD5 b482dd352ddeb71adc03e2d24c49189c
SHA1 2453d68c559fca10b1bc8185ef8da16c478520cb
SHA512 3e2054d5668d126c9e4e5574ff9ea7299eff9c0ba39e4c24e5cfe56b05f8ca0965a2b4fffe4a9bf75a1a470cb92cc159645d1d90af2ac86c8ddca3aec0e82044
SSDEEP 3072:IUTC1og6z8WZpqelLS2P6T5/5ZYnjT9ttQn3vbFC3qnDOrQURwQna8x:IUO1YzvZppLtP6Ye/ZOma8URw2a8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 209KB

file.exe

IMPHASH 155a8220c3a90cd41bc56b1f2b0907bc
SHA256 c0b1c26018d8b0c37ccbb586dca827fbb81029914cfca2a19d32e490c9950a75
MD5 b482dd352ddeb71adc03e2d24c49189c
SHA1 2453d68c559fca10b1bc8185ef8da16c478520cb
SHA512 3e2054d5668d126c9e4e5574ff9ea7299eff9c0ba39e4c24e5cfe56b05f8ca0965a2b4fffe4a9bf75a1a470cb92cc159645d1d90af2ac86c8ddca3aec0e82044
SSDEEP 3072:IUTC1og6z8WZpqelLS2P6T5/5ZYnjT9ttQn3vbFC3qnDOrQURwQna8x:IUO1YzvZppLtP6Ye/ZOma8URw2a8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37702

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalSize InterlockedExchange GetTickCount GetNumaProcessorNode GetConsoleAliasExesLengthW EnumSystemCodePagesA TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW SetWaitableTimer GetVersionExA FindResourceW OpenEventA SearchPathA GetComputerNameA CallNamedPipeA GetProcAddress GlobalAlloc FoldStringA SetFileTime GetConsoleAliasesLengthA GetSystemWindowsDirectoryA GetPrivateProfileStructW GetACP SetProcessAffinityMask GlobalFindAtomW VerifyVersionInfoA CreateActCtxW FindNextVolumeA InterlockedIncrement GetComputerNameW CancelDeviceWakeupRequest GetConsoleFontSize InterlockedCompareExchange GetPrivateProfileStructA EnumCalendarInfoW EnterCriticalSection InterlockedDecrement GetNamedPipeHandleStateW AreFileApisANSI SetLastError WriteConsoleW GetVolumeInformationA GetThreadPriority LoadLibraryW Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthA

advapi32

SetThreadToken

Sharing