file[.]exe | Triage™

General

Target
file.exe
Size 303KB
Sample221107-3dphlaedg7
SHA256 ba122f53dd92c7e3ced6166bc98254eaf8b349418ff39791977c6edfe4e1e1d7
MD5 0a8e1befef3d6b6ec49bd9e44fb6e74a
SHA1 0e75779e20ecd5f6b96ce183084bce019b2e9f3f
SHA512 ded435a962a8e7cc3043e956a13436872b2215bab8664771442de56e31aa97df7c5ce9ba8fd49dafddb1e0773db898666ae58273bcbb40821ea0bd7ed866f203
SSDEEP 6144:RLgwMC/qXDthy77voRT3MF8JWxDPnChjVFoG6bao2XrdurXfWraaEoz:R0wMC/ofy3cT3x1IG6bqXrdubeea
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 303KB

file.exe

IMPHASH 37978a302cc66e462201a896d03c42ea
SHA256 ba122f53dd92c7e3ced6166bc98254eaf8b349418ff39791977c6edfe4e1e1d7
MD5 0a8e1befef3d6b6ec49bd9e44fb6e74a
SHA1 0e75779e20ecd5f6b96ce183084bce019b2e9f3f
SHA512 ded435a962a8e7cc3043e956a13436872b2215bab8664771442de56e31aa97df7c5ce9ba8fd49dafddb1e0773db898666ae58273bcbb40821ea0bd7ed866f203
SSDEEP 6144:RLgwMC/qXDthy77voRT3MF8JWxDPnChjVFoG6bao2XrdurXfWraaEoz:R0wMC/ofy3cT3x1IG6bqXrdubeea
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24998

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount SearchPathA GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalLock WaitForDebugEvent GlobalGetAtomNameW MapViewOfFileEx GetModuleHandleW VirtualProtect GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer GlobalAlloc FindResourceW OpenEventA GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleA GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA MoveFileW GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceW GetCPInfo SetProcessAffinityMask GlobalFindAtomW WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest InterlockedIncrement EnterCriticalSection GetPrivateProfileStructA InterlockedExchangeAdd GetConsoleAliasExesLengthA EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize VirtualAlloc HeapReAlloc GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing