file[.]exe | Triage™

General

Target
file.exe
Size 303KB
Sample221108-e6hnraabgn
SHA256 bfd4208e62e5ce42326eec08c773dd0bf36706770e6ac3fa5904edcaeb9b7a40
MD5 2b01422c395edc233e3f619b5920395e
SHA1 26be19870b9b81699446fb6f983c9a11eb7dc7a1
SHA512 71b75575ff536cd9a211452e92cf47e2099dd6270b8dc36fd6377e209342c61c8b88e2d45718eab5026b7a3b373fb928d5c51a8c8ad5118cfb1fe8605955b574
SSDEEP 6144:MILMOBslZDZx2aZxmiyu3Wd3/xigZtOJrrdpInPvClgR5ieEQRgg2:fYOBsrDZka026PxigG1rdyvClgRv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 303KB

file.exe

IMPHASH ea4b36c5b8cf42a5f2ff3359269474cd
SHA256 bfd4208e62e5ce42326eec08c773dd0bf36706770e6ac3fa5904edcaeb9b7a40
MD5 2b01422c395edc233e3f619b5920395e
SHA1 26be19870b9b81699446fb6f983c9a11eb7dc7a1
SHA512 71b75575ff536cd9a211452e92cf47e2099dd6270b8dc36fd6377e209342c61c8b88e2d45718eab5026b7a3b373fb928d5c51a8c8ad5118cfb1fe8605955b574
SSDEEP 6144:MILMOBslZDZx2aZxmiyu3Wd3/xigZtOJrrdpInPvClgR5ieEQRgg2:fYOBsrDZka026PxigG1rdyvClgRv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25254

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount SearchPathW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalReAlloc WaitForDebugEvent GlobalGetAtomNameW MapViewOfFile GetModuleHandleW VirtualProtect GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer LocalAlloc FindResourceW OpenEventA SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleA GlobalAlloc GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA MoveFileW GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExA DefineDosDeviceW GetCPInfo SetProcessAffinityMask GlobalFindAtomW WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA GetComputerNameW CancelDeviceWakeupRequest EnumCalendarInfoA InterlockedIncrement GetPrivateProfileStructA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InitializeCriticalSection InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing