file[.]exe | Triage™

General

Target
file.exe
Size 271KB
Sample220929-c61s8aheh2
SHA256 59e63158eab6fadd44f5713e9b32548c0ebab2f71a7c45d0d15bcc7bfe180113
MD5 f94472ebc25195311d7938126e07358c
SHA1 c4ec1d26a42bc4d7ae68c1a63add59f3bea1b728
SHA512 156abbe3a44bad8fade90fb6a7981df8f9b2a685c15d496a54bad37635c41a6acbc312856e8d8399b24ef7f3505e6194042704137ff686eee55fc120cc64046d
SSDEEP 6144:vYTo2JzQFEHHwHtSYU6rL+ilIFiga3wVfg:v1F2HySYU61qIp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 271KB

file.exe

IMPHASH 6fec1abc95e8dc40bf514011d243c58d
SHA256 59e63158eab6fadd44f5713e9b32548c0ebab2f71a7c45d0d15bcc7bfe180113
MD5 f94472ebc25195311d7938126e07358c
SHA1 c4ec1d26a42bc4d7ae68c1a63add59f3bea1b728
SHA512 156abbe3a44bad8fade90fb6a7981df8f9b2a685c15d496a54bad37635c41a6acbc312856e8d8399b24ef7f3505e6194042704137ff686eee55fc120cc64046d
SSDEEP 6144:vYTo2JzQFEHHwHtSYU6rL+ilIFiga3wVfg:v1F2HySYU61qIp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30457

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA InterlockedCompareExchange OpenWaitableTimerA CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA SetSystemTimeAdjustment FindNextFileW EnumResourceTypesA GetModuleFileNameW IsBadCodePtr LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA GetProcAddress GetUserDefaultLangID GetConsoleAliasW FindFirstChangeNotificationW GetFileType SetFileShortNameA lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameA FoldStringW ResetEvent GlobalWire GetComputerNameA GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetCalendarInfoW SetComputerNameA GetFileAttributesA GetVolumePathNameW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

Sharing