file[.]exe | Triage™

General

Target
file.exe
Size 363KB
Sample221003-v7prfshbdk
SHA256 18d76178e1c00f40d1728f9a1ad418d67f74b9ae8ab96fc290fd992bafc5125a
MD5 119d38cad5af037640b044166849c520
SHA1 1fd2be2896bda288da7aefa07c8c5320e9f5eee1
SHA512 9a312cc8a678b21c0a5e7ca57c1d725da6fa5f54a88df79211bc2d798e054484327173b301260363bd987b541d659bdc194f0b22450af46992cdaaa0d460d5f8
SSDEEP 6144:Y1yY5+usjfCtT58NFoRGssiu/2lLP8jqRAOGJXDqAGxfcsHg4qb27:fY5fKfCt98NFoEgExdKrCa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 363KB

file.exe

IMPHASH a821db003ec7e191400560b07428f456
SHA256 18d76178e1c00f40d1728f9a1ad418d67f74b9ae8ab96fc290fd992bafc5125a
MD5 119d38cad5af037640b044166849c520
SHA1 1fd2be2896bda288da7aefa07c8c5320e9f5eee1
SHA512 9a312cc8a678b21c0a5e7ca57c1d725da6fa5f54a88df79211bc2d798e054484327173b301260363bd987b541d659bdc194f0b22450af46992cdaaa0d460d5f8
SSDEEP 6144:Y1yY5+usjfCtT58NFoRGssiu/2lLP8jqRAOGJXDqAGxfcsHg4qb27:fY5fKfCt98NFoEgExdKrCa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40025

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect GetLastError GetSystemInfo WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW CreateFileW RtlUnwind RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing