file[.]exe | Triage™

General

Target
file.exe
Size 181KB
Sample221107-nfezlsffen
SHA256 73b53231dea644bdc7c62325d05fd3155c2cc0e91b493cac8b17f5c4bebc363c
MD5 e49b5b38b3c3f53257036e3676ef5cd7
SHA1 2a69ea888f3e48eeb2cda4b28e63f41b9a86ad29
SHA512 8298ba528fa157bbaf3a197bd0b05a1e0722e18a8a8b8821362eab55d41ad6ab0c04287c9a9ceb7169df76c5a23fc9b57fd7ede54c3d677587f43882ce7ca020
SSDEEP 3072:nep0oBqa5TedeLoC3LN5xto87Qs43aztmI3Kcbbz:nAF5TeILt31tPQRKzf6cD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 181KB

file.exe

IMPHASH cae27583bc611d687b8324f54095cf7d
SHA256 73b53231dea644bdc7c62325d05fd3155c2cc0e91b493cac8b17f5c4bebc363c
MD5 e49b5b38b3c3f53257036e3676ef5cd7
SHA1 2a69ea888f3e48eeb2cda4b28e63f41b9a86ad29
SHA512 8298ba528fa157bbaf3a197bd0b05a1e0722e18a8a8b8821362eab55d41ad6ab0c04287c9a9ceb7169df76c5a23fc9b57fd7ede54c3d677587f43882ce7ca020
SSDEEP 3072:nep0oBqa5TedeLoC3LN5xto87Qs43aztmI3Kcbbz:nAF5TeILt31tPQRKzf6cD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

33782

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount CopyFileExW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalLock WaitForDebugEvent GlobalGetAtomNameW MapViewOfFileEx GetModuleHandleW VirtualProtectEx GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer GlobalAlloc FindResourceW OpenEventW SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleA GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA MoveFileW GetOEMCP GetMailslotInfo GetConsoleAliasW LockFile GetDiskFreeSpaceExW DefineDosDeviceW GetACP SetProcessAffinityMask GlobalFindAtomW WriteConsoleW MoveFileWithProgressA AddRefActCtx FindNextVolumeA InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest LocalUnlock EnterCriticalSection GetPrivateProfileStructA GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI SetLastError GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

advapi32

SetThreadToken

Sharing