file[.]exe | Triage™

General

Target
file.exe
Size 303KB
Sample221108-l3dc7acgfk
SHA256 df1d237b4ca7c21e5c61654b6f6312e3f465faaba609f6865fce073b2e6038b1
MD5 3272827ad9c9684992c195b34a415fdd
SHA1 a43e2aa81f6ec408594aa044e56947f3bc5e1c96
SHA512 6b1da71f4a09266637c406982c4d1c0a78695d1c489a4ddf80bbe81b0cc9b2ef144a5677b2fdcbd1569cbfceac88121a9df769552e236ac25955ae18b4b6ce3e
SSDEEP 6144:6LWO52hVgI+mOAFy1kOSWrQWmhH//WhKXW6H7gkj:6iO52h3QAFRWr0f/FmaUk
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 303KB

file.exe

IMPHASH db3d807a4d7ab750ef3fa49bdae38f00
SHA256 df1d237b4ca7c21e5c61654b6f6312e3f465faaba609f6865fce073b2e6038b1
MD5 3272827ad9c9684992c195b34a415fdd
SHA1 a43e2aa81f6ec408594aa044e56947f3bc5e1c96
SHA512 6b1da71f4a09266637c406982c4d1c0a78695d1c489a4ddf80bbe81b0cc9b2ef144a5677b2fdcbd1569cbfceac88121a9df769552e236ac25955ae18b4b6ce3e
SSDEEP 6144:6LWO52hVgI+mOAFy1kOSWrQWmhH//WhKXW6H7gkj:6iO52h3QAFRWr0f/FmaUk
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25462

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount SearchPathW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalReAlloc WaitForDebugEvent GlobalGetAtomNameW MapViewOfFile GetModuleHandleW VirtualProtect GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer LocalAlloc FindResourceW OpenEventA SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleW GlobalAlloc GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExA DefineDosDeviceW GetCPInfo SetProcessAffinityMask GlobalFindAtomA WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA GetComputerNameW MoveFileW EnumCalendarInfoA InterlockedIncrement GetPrivateProfileStructA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InitializeCriticalSection InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing