file[.]exe | Triage™

General

Target
file.exe
Size 211KB
Sample221113-1dletsdb87
SHA256 f10339555c017e66409ada66ee9cd51cc65be27b382c9ed29d5b7ec3db7014cf
MD5 f1f3f5ef31152c45e0fe0a78a98c5911
SHA1 3d8e2602ce6d549c523e89198f1c1a1566ea5a42
SHA512 777857f95afbd3310bf081dade2f078be27cf7b1e3b78a2a8a2ab41bc0f3083e9443ee15736d964ee5a396e6efdb78ad080fc0edf114ec9d3e5d1a60160b2172
SSDEEP 3072:k5LWLWl4FvS5mGLwDgRBLyRLLWoBR0w4VtnUez66EnO0THnfjFlb0q2cpJeF/0v0:yqLWlYAiRmAGwE6i0zfj3QQJeF/sRQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 211KB

file.exe

IMPHASH 49722f1cfa82ece9963ca752aa123cd3
SHA256 f10339555c017e66409ada66ee9cd51cc65be27b382c9ed29d5b7ec3db7014cf
MD5 f1f3f5ef31152c45e0fe0a78a98c5911
SHA1 3d8e2602ce6d549c523e89198f1c1a1566ea5a42
SHA512 777857f95afbd3310bf081dade2f078be27cf7b1e3b78a2a8a2ab41bc0f3083e9443ee15736d964ee5a396e6efdb78ad080fc0edf114ec9d3e5d1a60160b2172
SSDEEP 3072:k5LWLWl4FvS5mGLwDgRBLyRLLWoBR0w4VtnUez66EnO0THnfjFlb0q2cpJeF/0v0:yqLWlYAiRmAGwE6i0zfj3QQJeF/sRQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13750

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA EnumSystemCodePagesW LocalFree FindNextFileW TlsGetValue CopyFileExA SetDefaultCommConfigW SetVolumeLabelA ReadFileEx VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExW LocalFlags VirtualProtect TlsSetValue CreateFileA MapViewOfFile GetWindowsDirectoryW GetModuleHandleA VirtualAlloc IsBadReadPtr CreateMemoryResourceNotification WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW GetNamedPipeInfo GetCPInfoExA SearchPathA RequestWakeupLatency CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc SetFileTime GetVolumeNameForVolumeMountPointA SetCalendarInfoW GetModuleHandleW TerminateThread MoveFileA PeekNamedPipe GetMailslotInfo SetThreadUILanguage GetDiskFreeSpaceExA SetVolumeMountPointA GetOEMCP SetProcessAffinityMask CreateDirectoryExA GlobalFindAtomW MoveFileWithProgressW InterlockedIncrement CancelTimerQueueTimer ZombifyActCtx InitializeCriticalSection FindNextVolumeW LeaveCriticalSection HeapQueryInformation SetConsoleTitleA GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetTickCount SetLastError GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW TlsAlloc TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoA

Sharing