file[.]exe | Triage™

General

Target
file.exe
Size 211KB
Sample221103-2nvxpagce2
SHA256 6143bdca803a62346ab8ac32f4b0887646d7bbd98430d67ee9e56eac75230672
MD5 76c019f62370003ed81261ee7fd4cadf
SHA1 1938cdc3abbcd1fdb65e794810dc6f9a72bad1ea
SHA512 8d8efa83664b4e3d4dbb0ed685b594948782676b9dfb36591a403daea966ebe7f6e7b599c02ebf11aab58490107e2f3a870d1eed56b71bf7a61b3849050b6459
SSDEEP 3072:16/+uP3QIgexa4LGlV/6GJ5S98jfYttmMohrw+fOeT/x:16GA3rgexXLYV/CyMTUrrGeT/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 211KB

file.exe

IMPHASH ca7da7b616d2b4d3a277aecb32a135a5
SHA256 6143bdca803a62346ab8ac32f4b0887646d7bbd98430d67ee9e56eac75230672
MD5 76c019f62370003ed81261ee7fd4cadf
SHA1 1938cdc3abbcd1fdb65e794810dc6f9a72bad1ea
SHA512 8d8efa83664b4e3d4dbb0ed685b594948782676b9dfb36591a403daea966ebe7f6e7b599c02ebf11aab58490107e2f3a870d1eed56b71bf7a61b3849050b6459
SSDEEP 3072:16/+uP3QIgexa4LGlV/6GJ5S98jfYttmMohrw+fOeT/x:16GA3rgexXLYV/CyMTUrrGeT/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37974

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalSize InterlockedDecrement GetTickCount CopyFileExA GetConsoleAliasExesLengthW EnumSystemCodePagesA TlsGetValue MoveFileWithProgressW VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleW lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW CancelWaitableTimer GetVersionExA FindResourceW OpenEventW SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress GetModuleHandleA GlobalAlloc SetFileTime GetConsoleAliasesLengthA GetComputerNameA GetSystemWindowsDirectoryA GetMailslotInfo GetTapeParameters OpenJobObjectW GetPrivateProfileIntW ReadConsoleInputW _lread LockFile GetDiskFreeSpaceExW DefineDosDeviceW GetACP SetProcessAffinityMask GlobalFindAtomW WriteConsoleW AddRefActCtx FindNextVolumeA MoveFileWithProgressA InterlockedIncrement InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest EnumCalendarInfoA InterlockedCompareExchange EnterCriticalSection GetPrivateProfileStructA EnumCalendarInfoW GetConsoleAliasExesLengthA GetNamedPipeHandleStateW AreFileApisANSI InterlockedExchange SetLastError ReadConsoleW GetVolumeInformationA OpenFileMappingA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthA

advapi32

SetThreadToken

Sharing