file[.]exe | Triage™

General

Target
file.exe
Size 164KB
Sample221107-tk8elshcfq
SHA256 21c9461e628bf580928278641131f0215e89dca8e89649e2c74bdb0725d7749f
MD5 054975eb2dec13326f4dace304825eb4
SHA1 43d1280bb61d4f8a51f593bd6ebdb813c01d700a
SHA512 8bccbfed1ab975727553bb8fb4b0ddcaf9d59e4c7e4d0dbb5a21ef58b9299da9a84b5489f78365f3dc92c198a9bfde6d18d9aa67612737b60702d1756608fd62
SSDEEP 1536:CHnIx1J7kzybDL5xaWiq3kRfdOs8HRW96uqy+PgyqEJG3APtlMkeCNrX6EMGgsfE:gnIiz6L30VdQHRpn4illMlCdqAfDhs
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 164KB

file.exe

IMPHASH 483d42c4bab2861786531c440bf02d80
SHA256 21c9461e628bf580928278641131f0215e89dca8e89649e2c74bdb0725d7749f
MD5 054975eb2dec13326f4dace304825eb4
SHA1 43d1280bb61d4f8a51f593bd6ebdb813c01d700a
SHA512 8bccbfed1ab975727553bb8fb4b0ddcaf9d59e4c7e4d0dbb5a21ef58b9299da9a84b5489f78365f3dc92c198a9bfde6d18d9aa67612737b60702d1756608fd62
SSDEEP 1536:CHnIx1J7kzybDL5xaWiq3kRfdOs8HRW96uqy+PgyqEJG3APtlMkeCNrX6EMGgsfE:gnIiz6L30VdQHRpn4illMlCdqAfDhs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25222

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount CopyFileExW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalLock WaitForDebugEvent GlobalGetAtomNameW MapViewOfFileEx GetModuleHandleW VirtualProtectEx GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer GlobalAlloc FindResourceW OpenEventW SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleA GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA MoveFileW GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceW GetCPInfo SetProcessAffinityMask GlobalFindAtomW WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest EnterCriticalSection GetPrivateProfileStructA InterlockedExchangeAdd GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize VirtualAlloc HeapReAlloc GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing