file[.]exe | Triage™

General

Target
file.exe
Size 363KB
Sample221005-vxj38afcbl
SHA256 f4a2c4f8843a3cb25d7079e0f1a1beb854ba5dcc6ae044016033a6ea3516aa32
MD5 7e0ea8654464eda77bab6f5f37c9dbd2
SHA1 94e66671806ab4ed5bed727af3d342440ec6c03d
SHA512 351aedbd7388e4fc8b5f93863192850872db3924cbdca8d05607a2fdce3cc15274d31e01cc0c02a7e952a24829859366b1717b999c51875caa960a17a64bd541
SSDEEP 6144:6HdjGEo9jzEzaWuN4stWLqexuoZKfcjU6VAOeEK18xbLBg5vnIbDQwxBAnMJ9:69jGrlzEzVuN4sIRVcEpfQwxBmU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 363KB

file.exe

IMPHASH f649642db70f229fba6aec1f99f0e147
SHA256 f4a2c4f8843a3cb25d7079e0f1a1beb854ba5dcc6ae044016033a6ea3516aa32
MD5 7e0ea8654464eda77bab6f5f37c9dbd2
SHA1 94e66671806ab4ed5bed727af3d342440ec6c03d
SHA512 351aedbd7388e4fc8b5f93863192850872db3924cbdca8d05607a2fdce3cc15274d31e01cc0c02a7e952a24829859366b1717b999c51875caa960a17a64bd541
SSDEEP 6144:6HdjGEo9jzEzaWuN4stWLqexuoZKfcjU6VAOeEK18xbLBg5vnIbDQwxBAnMJ9:69jGrlzEzVuN4sIRVcEpfQwxBmU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40505

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetSystemInfo WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW CreateFileW RtlUnwind RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing