file[.]exe | Triage™

General

Target
file.exe
Size 201KB
Sample221018-e5ynkseeb7
SHA256 e35c61a13cf719b0ea67117f8f16b7e3777f729d097ed0d83ebe62638895bdfc
MD5 3b4af7611f352c1cf0a18bdb865a0cd6
SHA1 7996cb36bf1ce9e97b48be1069847e39c57c83d6
SHA512 06f887c2c1eefb776c8f459204ccc93f347b3ce63521571960a4c67cc403bbdfcfe20f767ca4d8f460159a03d1e7e2a556ce03c1e506c0a176c7a783f89587a7
SSDEEP 3072:tXJAz9ULK0EWH5e5CSbP2e4vmNpJ4dxrE50KYxEYm5Gu:pKRULKKH5ePv4v4J4/C0e
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 201KB

file.exe

IMPHASH 9f0bc40a49527e7dca0a4b2404ac76f0
SHA256 e35c61a13cf719b0ea67117f8f16b7e3777f729d097ed0d83ebe62638895bdfc
MD5 3b4af7611f352c1cf0a18bdb865a0cd6
SHA1 7996cb36bf1ce9e97b48be1069847e39c57c83d6
SHA512 06f887c2c1eefb776c8f459204ccc93f347b3ce63521571960a4c67cc403bbdfcfe20f767ca4d8f460159a03d1e7e2a556ce03c1e506c0a176c7a783f89587a7
SSDEEP 3072:tXJAz9ULK0EWH5e5CSbP2e4vmNpJ4dxrE50KYxEYm5Gu:pKRULKKH5ePv4v4J4/C0e
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25071

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID CreateMutexW GetConsoleAliasesLengthW InterlockedIncrement VerSetConditionMask SetComputerNameW SleepEx GetFileAttributesExA IsBadReadPtr WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW GetFileAttributesA DnsHostnameToComputerNameW GetConsoleAliasW GetBinaryTypeA GetGeoInfoA GetCompressedFileSizeA GetTimeZoneInformation GetLastError GetProcAddress VirtualAlloc HeapSize LoadLibraryA WriteConsoleA LocalAlloc CreateEventW AddAtomA FoldStringA FindNextFileA GetModuleHandleA FreeEnvironmentStringsW ReadConsoleInputW GetVersion EnumResourceLanguagesW SetFileAttributesW LCMapStringW LocalFileTimeToFileTime GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess EnterCriticalSection LeaveCriticalSection SetFilePointer WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException CreateFileA CloseHandle

user32

ClientToScreen

Sharing