file[.]exe | Triage™

General

Target
file.exe
Size 682KB
Sample221107-xcbmfscda8
SHA256 9ea5af00552becdfea2041d047f2b8a1f8eb8922361060707eb0a8e1c0c5a084
MD5 10b49e61bc3c05b0a9d2d549063c0aa4
SHA1 ac75cc513405b7c0bc4bb1c7e410817af6ec17f4
SHA512 e0dce36e05a61f5d9615d249182e83d9edf2f3a6d762684da178e473e4ef38f639eadcdc7b00dc583646a260afc2ee6e99a7a53858535c2d1910b869718e5dd5
SSDEEP 12288:R3EQ6KJX1YUBSTuTb7tmr54cW88O3JYlwXOon12bPbjtgqVBg:GxKRCCTXg5DWOiaX11oP9gqVBg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 682KB

file.exe

IMPHASH 8d88ea38e7678a5f75e68eda36b71079
SHA256 9ea5af00552becdfea2041d047f2b8a1f8eb8922361060707eb0a8e1c0c5a084
MD5 10b49e61bc3c05b0a9d2d549063c0aa4
SHA1 ac75cc513405b7c0bc4bb1c7e410817af6ec17f4
SHA512 e0dce36e05a61f5d9615d249182e83d9edf2f3a6d762684da178e473e4ef38f639eadcdc7b00dc583646a260afc2ee6e99a7a53858535c2d1910b869718e5dd5
SSDEEP 12288:R3EQ6KJX1YUBSTuTb7tmr54cW88O3JYlwXOon12bPbjtgqVBg:GxKRCCTXg5DWOiaX11oP9gqVBg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25062

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount SearchPathA GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalLock WaitForDebugEvent GlobalGetAtomNameW MapViewOfFileEx GetModuleHandleW VirtualProtectEx GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer GlobalAlloc FindResourceW OpenEventW GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleA GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA MoveFileW GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceW GetCPInfo SetProcessAffinityMask GlobalFindAtomW WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest EnterCriticalSection GetPrivateProfileStructA InterlockedExchangeAdd GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize VirtualAlloc HeapReAlloc GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing