file[.]exe | Triage™

General

Target
file.exe
Size 164KB
Sample221108-c9affafbcn
SHA256 fe7fbe60225bf1f9a524420802b7af625f162e1bb2bca6a1efe53880e27f25a3
MD5 1fcd231149e6030ed9b3b305255db30d
SHA1 9cd1e2b1148f69d2b56ee4f061598bf4b3501b91
SHA512 7e84bef0e343fbb5437f1e63a61654985114e1e1308b4387a456a7143961a6c7d12313d5a40939da92044cc959c922ac4f9c8c26f0b32d9ada31406df9da90f4
SSDEEP 1536:+GxxF0sOSjImSfPuLlmw/yIPOAWYxE8LRNboQIJZgWRoBaJwurCv1TLHKVToLCYP:+GvxUuLYzTkjLRtoTRoBtWTMCYeK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 164KB

file.exe

IMPHASH ea4b36c5b8cf42a5f2ff3359269474cd
SHA256 fe7fbe60225bf1f9a524420802b7af625f162e1bb2bca6a1efe53880e27f25a3
MD5 1fcd231149e6030ed9b3b305255db30d
SHA1 9cd1e2b1148f69d2b56ee4f061598bf4b3501b91
SHA512 7e84bef0e343fbb5437f1e63a61654985114e1e1308b4387a456a7143961a6c7d12313d5a40939da92044cc959c922ac4f9c8c26f0b32d9ada31406df9da90f4
SSDEEP 1536:+GxxF0sOSjImSfPuLlmw/yIPOAWYxE8LRNboQIJZgWRoBaJwurCv1TLHKVToLCYP:+GvxUuLYzTkjLRtoTRoBtWTMCYeK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25254

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount SearchPathW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalReAlloc WaitForDebugEvent GlobalGetAtomNameW MapViewOfFile GetModuleHandleW VirtualProtect GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer LocalAlloc FindResourceW OpenEventA SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleA GlobalAlloc GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA MoveFileW GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExA DefineDosDeviceW GetCPInfo SetProcessAffinityMask GlobalFindAtomW WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA GetComputerNameW CancelDeviceWakeupRequest EnumCalendarInfoA InterlockedIncrement GetPrivateProfileStructA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InitializeCriticalSection InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing