file[.]exe | Triage™

General

Target
file.exe
Size 350KB
Sample221103-v3regsdab2
SHA256 19a6fcd6ba12f86eb717e871872a46eba39dca0c3bdf9b2aecc97845f165b705
MD5 e6f230df4abe691eba3e788332091327
SHA1 0a71e96652b9760f3c1029172448fb535b1fe0d3
SHA512 fa457ff2c6bbf958f62fb096f5b02b2ee2fe33124cc13c20072b7c8a22ca5bbeb047f4908890199589ab8c30cfb0c1c79c14b26b66344d1e0aa5915b4439d75d
SSDEEP 6144:PxDwj9kkLEa4ATaEe7aOdfQznTD15XrwzOX+fSw:PxUhdAa4AWvWnn1Nwg+R
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 350KB

file.exe

IMPHASH 31934ecb5b72126087ef544c979327e9
SHA256 19a6fcd6ba12f86eb717e871872a46eba39dca0c3bdf9b2aecc97845f165b705
MD5 e6f230df4abe691eba3e788332091327
SHA1 0a71e96652b9760f3c1029172448fb535b1fe0d3
SHA512 fa457ff2c6bbf958f62fb096f5b02b2ee2fe33124cc13c20072b7c8a22ca5bbeb047f4908890199589ab8c30cfb0c1c79c14b26b66344d1e0aa5915b4439d75d
SSDEEP 6144:PxDwj9kkLEa4ATaEe7aOdfQznTD15XrwzOX+fSw:PxUhdAa4AWvWnn1Nwg+R
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38054

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalSize InterlockedDecrement GetTickCount CopyFileExA GetConsoleAliasExesLengthW EnumSystemCodePagesA TlsGetValue MoveFileWithProgressW VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleW lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW CancelWaitableTimer GetVersionExA FindResourceW OpenEventW SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress GetModuleHandleA GlobalAlloc SetFileTime GetConsoleAliasesLengthA GetComputerNameA GetSystemWindowsDirectoryA GetMailslotInfo GetTapeParameters OpenJobObjectW GetPrivateProfileIntW ReadConsoleInputW _lread LockFile GetDiskFreeSpaceExW DefineDosDeviceW GetACP SetProcessAffinityMask GlobalFindAtomW WriteConsoleW AddRefActCtx FindNextVolumeA MoveFileWithProgressA InterlockedIncrement InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest EnumCalendarInfoA InterlockedCompareExchange EnterCriticalSection GetPrivateProfileStructA EnumCalendarInfoW GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateW AreFileApisANSI SetLastError ReadConsoleW GetVolumeInformationA OpenFileMappingA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthA

advapi32

SetThreadToken

Sharing