file[.]exe | Triage™

General

Target
file.exe
Size 303KB
Sample221107-wpq28sbbc5
SHA256 09e222fc7db06b4389f7b9749e654a58315e712062f300d5708a4f8b4e7adffe
MD5 f959009bfc6d882534e84f51f04db123
SHA1 13e5d795100b3f4adb8f54a4ae240b45f2499461
SHA512 b2a931e30273ff42b0a142dc2cf5dff15c539f91994ac9d86e206003db86f1c361a3b583d0fe70df8c3ae922c8aec6cd598c2cb9a1a3659839eb1f191bb13be1
SSDEEP 6144:ULWqsrnWAMvMi6jOl3n+c2P9FCEO9SSsCypMNer:UiqsrnkMZE3+c2lNOUdLpMN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 303KB

file.exe

IMPHASH 483d42c4bab2861786531c440bf02d80
SHA256 09e222fc7db06b4389f7b9749e654a58315e712062f300d5708a4f8b4e7adffe
MD5 f959009bfc6d882534e84f51f04db123
SHA1 13e5d795100b3f4adb8f54a4ae240b45f2499461
SHA512 b2a931e30273ff42b0a142dc2cf5dff15c539f91994ac9d86e206003db86f1c361a3b583d0fe70df8c3ae922c8aec6cd598c2cb9a1a3659839eb1f191bb13be1
SSDEEP 6144:ULWqsrnWAMvMi6jOl3n+c2P9FCEO9SSsCypMNer:UiqsrnkMZE3+c2lNOUdLpMN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25222

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount CopyFileExW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalLock WaitForDebugEvent GlobalGetAtomNameW MapViewOfFileEx GetModuleHandleW VirtualProtectEx GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer GlobalAlloc FindResourceW OpenEventW SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleA GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA MoveFileW GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceW GetCPInfo SetProcessAffinityMask GlobalFindAtomW WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest EnterCriticalSection GetPrivateProfileStructA InterlockedExchangeAdd GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize VirtualAlloc HeapReAlloc GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing