file[.]exe | Triage™

General

Target
file.exe
Size 213KB
Sample221107-nevcxadcb7
SHA256 9a941cff99433b69e172af8c97d2738a4c4846cd2f7dcf769bfa20f2c2dc21d9
MD5 109b80dd2c58b3d11d2337a5b1e3c024
SHA1 6c60111cb3e687f8144d80a68dc0040215d55677
SHA512 696f7623830e9923fb49328cce44d04591e9c02481af18c16fe1c656a3a50cab081e527c07e18dd350353f092c87090387bb37ff4afc5d4bf4bd1caf32f4a505
SSDEEP 3072:gaBNUcU5wjxV5LuWOjMrYN5QBPFv45ypI4N5aEWuThSY:guW6NLwMrxFv+4N5aEWuH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 213KB

file.exe

IMPHASH d4c5f97a5c4d3eaebbb1142457ab9469
SHA256 9a941cff99433b69e172af8c97d2738a4c4846cd2f7dcf769bfa20f2c2dc21d9
MD5 109b80dd2c58b3d11d2337a5b1e3c024
SHA1 6c60111cb3e687f8144d80a68dc0040215d55677
SHA512 696f7623830e9923fb49328cce44d04591e9c02481af18c16fe1c656a3a50cab081e527c07e18dd350353f092c87090387bb37ff4afc5d4bf4bd1caf32f4a505
SSDEEP 3072:gaBNUcU5wjxV5LuWOjMrYN5QBPFv45ypI4N5aEWuThSY:guW6NLwMrxFv+4N5aEWuH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41030

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount CopyFileExW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalLock WaitForDebugEvent GlobalGetAtomNameW MapViewOfFileEx GetModuleHandleW VirtualProtectEx GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer GlobalAlloc FindResourceW OpenEventW SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleA GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA MoveFileW GetOEMCP GetMailslotInfo GetConsoleAliasW LockFile GetDiskFreeSpaceExW DefineDosDeviceW GetACP SetProcessAffinityMask GlobalFindAtomW WriteConsoleW MoveFileWithProgressA AddRefActCtx FindNextVolumeA InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest LocalUnlock EnterCriticalSection GetPrivateProfileStructA GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI SetLastError GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing