file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample221125-e6j7ksbe95
SHA256 55bdc0f9d7483995f5ec82f3bb8d528815cf80cdc1a35dabb674e4abdf25ed1c
MD5 3c78cc80763783d2356d2c0cc270d036
SHA1 31f097da23c575ae3d11463f48f915932bafb12a
SHA512 f6b64d8e0a0c4a6b0b228b31b7b131f74fb6dd3dca919606c36e229ccfe7df99a967eb3b5471e5c2877c767041f25a90279668f984ffecdb14ff7636fa2985f3
SSDEEP 3072:CfyrXBTScabTW7y/e2xRc0jqr76OlnA9DMpYU4KZe8JbJ3Yl6PR+cpY8jw5:CfyrRTScamce2xrjq6O4MJ4bM5Y4+cE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH 0c1121d8e165411209f281f148bccf81
SHA256 55bdc0f9d7483995f5ec82f3bb8d528815cf80cdc1a35dabb674e4abdf25ed1c
MD5 3c78cc80763783d2356d2c0cc270d036
SHA1 31f097da23c575ae3d11463f48f915932bafb12a
SHA512 f6b64d8e0a0c4a6b0b228b31b7b131f74fb6dd3dca919606c36e229ccfe7df99a967eb3b5471e5c2877c767041f25a90279668f984ffecdb14ff7636fa2985f3
SSDEEP 3072:CfyrXBTScabTW7y/e2xRc0jqr76OlnA9DMpYU4KZe8JbJ3Yl6PR+cpY8jw5:CfyrRTScamce2xrjq6O4MJ4bM5Y4+cE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32853

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId CreateFileW GetFileSize CreateMutexW LockFileEx SetFilePointerEx SetEndOfFile AddAtomW InitializeCriticalSection DeleteAtom EnterCriticalSection AssignProcessToJobObject FreeConsole GetModuleHandleA GetProcAddress Sleep GetCommandLineA SetUnhandledExceptionFilter GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

advapi32

RegQueryValueExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegOpenKeyExA RegCloseKey GetUserNameA RegSetValueA RegCreateKeyA RegDeleteKeyA

comctl32

ImageList_Destroy InitCommonControlsEx ImageList_ReplaceIcon ImageList_Remove CreateToolbarEx ImageList_Create ImageList_SetBkColor

userenv

GetUserProfileDirectoryW GetProfilesDirectoryW

Sharing