file[.]exe | Triage™

General

Target
file.exe
Size 200KB
Sample221018-hbs3saege2
SHA256 aa27b2c0297ecab6bb54b89e8976328a3afd4397f10479ec9b145a4cdc79f9ba
MD5 4ccc97902b95f02913bcf8ab59c0bcdb
SHA1 4eb7b3835ad236cd4b1c9e7ce834f9302db9ba35
SHA512 c83570b0410bdf613537ab69426d5860c10461f4567c1496f45606aef3e12526e032988af998c0941395c8e5a0f379a75776c276203ef6786190816247bf2845
SSDEEP 3072:qXJ7lxDALZHVMuQudBe5MrbSMyClFDH9JPazj/F6CgM0KFNuPC4fli:KxrALZHVMgdB9XlBdJ6N6k0kOCV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 200KB

file.exe

IMPHASH 9f0bc40a49527e7dca0a4b2404ac76f0
SHA256 aa27b2c0297ecab6bb54b89e8976328a3afd4397f10479ec9b145a4cdc79f9ba
MD5 4ccc97902b95f02913bcf8ab59c0bcdb
SHA1 4eb7b3835ad236cd4b1c9e7ce834f9302db9ba35
SHA512 c83570b0410bdf613537ab69426d5860c10461f4567c1496f45606aef3e12526e032988af998c0941395c8e5a0f379a75776c276203ef6786190816247bf2845
SSDEEP 3072:qXJ7lxDALZHVMuQudBe5MrbSMyClFDH9JPazj/F6CgM0KFNuPC4fli:KxrALZHVMgdB9XlBdJ6N6k0kOCV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25071

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID CreateMutexW GetConsoleAliasesLengthW InterlockedIncrement VerSetConditionMask SetComputerNameW SleepEx GetFileAttributesExA IsBadReadPtr WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW GetFileAttributesA DnsHostnameToComputerNameW GetConsoleAliasW GetBinaryTypeA GetGeoInfoA GetCompressedFileSizeA GetTimeZoneInformation GetLastError GetProcAddress VirtualAlloc HeapSize LoadLibraryA WriteConsoleA LocalAlloc CreateEventW AddAtomA FoldStringA FindNextFileA GetModuleHandleA FreeEnvironmentStringsW ReadConsoleInputW GetVersion EnumResourceLanguagesW SetFileAttributesW LCMapStringW LocalFileTimeToFileTime GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess EnterCriticalSection LeaveCriticalSection SetFilePointer WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException CreateFileA CloseHandle

user32

ClientToScreen

Sharing