file[.]exe | Triage™

General

Target
file.exe
Size 210KB
Sample221103-pexnpsccep
SHA256 e68c5a68d3b22fa810f6fcff074b8f92ab81f4b97055b0bfb4b70842c1b14ddf
MD5 fefb16f64390f0bf23c8b0420c013794
SHA1 7322c4063305be70496ccfdcb3365a962110e4a6
SHA512 bf97762a9b7d25e104f6f62d388911cb4aca4b46bfb5d4379902ae5506ff3df146dc30dd8317fad90397ec697e362b052170dfa8ac7af38f72b576a53d8b66a2
SSDEEP 3072:zsnF57iFDy550LBitOB6ud5GfYiflCoDEGr2Z2ufXNL4gDy5evx:zsF9qDYiLBUOBeflBqZ2ufXNMmy5W
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 210KB

file.exe

IMPHASH 099d662a2293f03d302e7f9a64bba216
SHA256 e68c5a68d3b22fa810f6fcff074b8f92ab81f4b97055b0bfb4b70842c1b14ddf
MD5 fefb16f64390f0bf23c8b0420c013794
SHA1 7322c4063305be70496ccfdcb3365a962110e4a6
SHA512 bf97762a9b7d25e104f6f62d388911cb4aca4b46bfb5d4379902ae5506ff3df146dc30dd8317fad90397ec697e362b052170dfa8ac7af38f72b576a53d8b66a2
SSDEEP 3072:zsnF57iFDy550LBitOB6ud5GfYiflCoDEGr2Z2ufXNL4gDy5evx:zsF9qDYiLBUOBeflBqZ2ufXNMmy5W
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38166

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalSize InterlockedExchange GetTickCount CopyFileExA GetConsoleAliasExesLengthW EnumSystemCodePagesA TlsGetValue MoveFileWithProgressW VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW CancelWaitableTimer GetVersionExA FindResourceW OpenEventW SearchPathA GetThreadPriority CallNamedPipeA GetProcAddress GlobalAlloc SetFileTime GetConsoleAliasesLengthA OpenFileMappingA GetComputerNameA GetMailslotInfo GetTapeParameters OpenJobObjectW GetPrivateProfileIntA ReadConsoleInputW _lread LockFile GetPrivateProfileStructW GetDiskFreeSpaceExW DefineDosDeviceW GetACP SetProcessAffinityMask GlobalFindAtomW InterlockedDecrement VerifyVersionInfoA CreateActCtxW GetModuleHandleW FindNextVolumeA MoveFileWithProgressA InterlockedIncrement GetComputerNameW CancelDeviceWakeupRequest EnumCalendarInfoA InterlockedCompareExchange GetPrivateProfileStructA EnumCalendarInfoW EnterCriticalSection GetNamedPipeHandleStateW AreFileApisANSI LoadLibraryA SetLastError WriteConsoleW GetVolumeInformationA GetSystemWindowsDirectoryA LoadLibraryW Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthA

advapi32

SetThreadToken

Sharing