file[.]exe | Triage™

General

Target
file.exe
Size 198KB
Sample221018-pp2qeagagp
SHA256 91056829046405134cd4806751d4b79dd6f7d1fdfad2ff04a5f3294f16264e43
MD5 e54b004a010d2f9969e9b24b25484418
SHA1 8c656b7028325a20b62b8ee62efbce0f3db04af2
SHA512 16a51a2421c682f39aef5edc8f3befc54a81ce52099eefe3635d5b7126b512d74b95675ab05da86c02ba6ec76eb8ba910f1282b77ea996bdb0e5bd6c3089d9a4
SSDEEP 3072:fXNhnTL+5S76j4/5TmUz3G6ZysGZSiPfJhd0dlIL0KhqPTr:PLnTLwS760lPz2qFAfN0c0SqPv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 198KB

file.exe

IMPHASH f1d53553125eca662c893f9362b590cc
SHA256 91056829046405134cd4806751d4b79dd6f7d1fdfad2ff04a5f3294f16264e43
MD5 e54b004a010d2f9969e9b24b25484418
SHA1 8c656b7028325a20b62b8ee62efbce0f3db04af2
SHA512 16a51a2421c682f39aef5edc8f3befc54a81ce52099eefe3635d5b7126b512d74b95675ab05da86c02ba6ec76eb8ba910f1282b77ea996bdb0e5bd6c3089d9a4
SSDEEP 3072:fXNhnTL+5S76j4/5TmUz3G6ZysGZSiPfJhd0dlIL0KhqPTr:PLnTLwS760lPz2qFAfN0c0SqPv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21493

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID CreateMutexW GetConsoleAliasesLengthW InterlockedIncrement VerSetConditionMask GetConsoleAliasA GetFileAttributesExA WaitNamedPipeW SetCommTimeouts EnumResourceTypesA LoadLibraryW Sleep GetFileAttributesA DnsHostnameToComputerNameW GetConsoleAliasW WriteConsoleW IsBadWritePtr GetGeoInfoA GetCompressedFileSizeA RaiseException GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA LoadLibraryA WriteConsoleA LocalAlloc CreateEventW AddAtomA FoldStringA FindNextFileA GetModuleHandleA SetFileShortNameA ReadConsoleInputW LCMapStringW LocalFileTimeToFileTime GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP CreateFileA CloseHandle

user32

ClientToScreen

Sharing