file[.]exe | Triage™

General

Target
file.exe
Size 165KB
Sample221108-nffadadef5
SHA256 d0d87cb5e049db6d429e8102c6457ae19a87e3cccfa487b670d4638ea6eaaaa7
MD5 3efbbddc0d81866754ca042cd6c84172
SHA1 5a5ceb89a40f4a975c122910d74fb4bca552a138
SHA512 e4369d72b5b349df2881f47ebf2cc06cf28c73983cfaa9a61e5dbdd65b71e069f4175fc7863851d6ad9973d34e709f691b89a1930589e5556e160c8d40702111
SSDEEP 3072:so0kl1UbpeLiIH6mRFla9vFiQj5ARFXnXVgJWi6Ou8rNZ0:e8W4LiIWvfjCRZiMzOu8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 165KB

file.exe

IMPHASH c6e06acc7845ae086abdb773cec6d378
SHA256 d0d87cb5e049db6d429e8102c6457ae19a87e3cccfa487b670d4638ea6eaaaa7
MD5 3efbbddc0d81866754ca042cd6c84172
SHA1 5a5ceb89a40f4a975c122910d74fb4bca552a138
SHA512 e4369d72b5b349df2881f47ebf2cc06cf28c73983cfaa9a61e5dbdd65b71e069f4175fc7863851d6ad9973d34e709f691b89a1930589e5556e160c8d40702111
SSDEEP 3072:so0kl1UbpeLiIH6mRFla9vFiQj5ARFXnXVgJWi6Ou8rNZ0:e8W4LiIWvfjCRZiMzOu8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25622

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalFlags InterlockedDecrement GetTickCount SearchPathW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW SetVolumeLabelW GetProfileSectionA VerifyVersionInfoA QueryDosDeviceW LocalReAlloc DosDateTimeToFileTime VirtualQuery WaitForDebugEvent GlobalGetAtomNameW MapViewOfFile GetWindowsDirectoryA GetModuleHandleW VirtualProtect FindNextVolumeMountPointW IsBadWritePtr GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer LocalAlloc FindResourceW OpenEventA ReadConsoleW GetThreadPriority CallNamedPipeW GetProcAddress GetModuleHandleA GlobalAlloc GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExA DefineDosDeviceW GetCPInfo SetProcessAffinityMask GlobalFindAtomA WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA GetComputerNameW MoveFileW EnumCalendarInfoA InterlockedIncrement GetPrivateProfileStructA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InitializeCriticalSection InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI SearchPathA LoadLibraryW Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing