file[.]exe | Triage™

General

Target
file.exe
Size 164KB
Sample221107-xdg6macdg3
SHA256 01966678336616147af3981f893774b308dc3cf030bcf0731a33ce3aac2a46ab
MD5 747981f0b77678eb1a2d03ff42e9237e
SHA1 0cb671e59e470b36b1db2d1e9ebcc70be7f59bfe
SHA512 f91dc3357141a6a7d3546df1d09c92ada03d2b61abfe562640c858403cb324011666fc540b24fb462f4eae071a34d0abc8cce22ca27bb35ec92ecd96f8f40d7f
SSDEEP 3072:c3t5RMzFL/XbAdNUREiVwRtDO4aCXY06qqx4ZTwb1EaPL24y:+ROLvbAdGwtNI06xqwb1Zj
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 164KB

file.exe

IMPHASH 8d88ea38e7678a5f75e68eda36b71079
SHA256 01966678336616147af3981f893774b308dc3cf030bcf0731a33ce3aac2a46ab
MD5 747981f0b77678eb1a2d03ff42e9237e
SHA1 0cb671e59e470b36b1db2d1e9ebcc70be7f59bfe
SHA512 f91dc3357141a6a7d3546df1d09c92ada03d2b61abfe562640c858403cb324011666fc540b24fb462f4eae071a34d0abc8cce22ca27bb35ec92ecd96f8f40d7f
SSDEEP 3072:c3t5RMzFL/XbAdNUREiVwRtDO4aCXY06qqx4ZTwb1EaPL24y:+ROLvbAdGwtNI06xqwb1Zj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25046

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount SearchPathA GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalLock WaitForDebugEvent GlobalGetAtomNameW MapViewOfFileEx GetModuleHandleW VirtualProtectEx GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer GlobalAlloc FindResourceW OpenEventW GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleA GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA MoveFileW GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceW GetCPInfo SetProcessAffinityMask GlobalFindAtomW WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest EnterCriticalSection GetPrivateProfileStructA InterlockedExchangeAdd GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize VirtualAlloc HeapReAlloc GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing