file[.]exe | Triage™

General

Target
file.exe
Size 303KB
Sample221108-j1j2vafba3
SHA256 94b7f4efeb2e325b65c2ada70c884cb6d1537960131f67aa8cfee9126eb69c9f
MD5 5daecba7835c47bcfba748e0c96041da
SHA1 6dcc4c431755c432ec7abd00561fe41bfc43c7e2
SHA512 57458de088030cdaa19500b91d7e039c1ceb572de2fcf51a879a8b1b39364dc5520ab42fe2d723006d537fe5b446f2b94f0da579f707282a4beb7d2dea9ffac9
SSDEEP 6144:KLGuC+mk1W/ljSgtjk9NzHsssAejJAUr9Ifh:Kyuvpg95VENzH/f6AI9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 303KB

file.exe

IMPHASH db3d807a4d7ab750ef3fa49bdae38f00
SHA256 94b7f4efeb2e325b65c2ada70c884cb6d1537960131f67aa8cfee9126eb69c9f
MD5 5daecba7835c47bcfba748e0c96041da
SHA1 6dcc4c431755c432ec7abd00561fe41bfc43c7e2
SHA512 57458de088030cdaa19500b91d7e039c1ceb572de2fcf51a879a8b1b39364dc5520ab42fe2d723006d537fe5b446f2b94f0da579f707282a4beb7d2dea9ffac9
SSDEEP 6144:KLGuC+mk1W/ljSgtjk9NzHsssAejJAUr9Ifh:Kyuvpg95VENzH/f6AI9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25462

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount SearchPathW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalReAlloc WaitForDebugEvent GlobalGetAtomNameW MapViewOfFile GetModuleHandleW VirtualProtect GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer LocalAlloc FindResourceW OpenEventA SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleW GlobalAlloc GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExA DefineDosDeviceW GetCPInfo SetProcessAffinityMask GlobalFindAtomA WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA GetComputerNameW MoveFileW EnumCalendarInfoA InterlockedIncrement GetPrivateProfileStructA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InitializeCriticalSection InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing