file[.]exe | Triage™

General

Target
file.exe
Size 197KB
Sample221018-r2eshsgbd3
SHA256 7bf353a880c3307e39e2a6cdb63d9eeb1ca346f945509b3119b03a190baf29ea
MD5 1fbdbd4dc3a2c24d46125d7643be616c
SHA1 cfa152c8debec9e9946860f8c354a8e7616c8d27
SHA512 eceac10971a63767e5b4f2aba8c56be2d412a04f28251a84791f8f44ac6e7bb89ca6efb2c5f15cb23960c37cd4da6e2109244c89e7c5d6f2f930fab8940e8942
SSDEEP 3072:oX1CjLCrdBUn5b2RvEwpAV/uR/rulGL0KPF9Sp:84jLWde12Rcwp8uAk00F9W
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 197KB

file.exe

IMPHASH f1d53553125eca662c893f9362b590cc
SHA256 7bf353a880c3307e39e2a6cdb63d9eeb1ca346f945509b3119b03a190baf29ea
MD5 1fbdbd4dc3a2c24d46125d7643be616c
SHA1 cfa152c8debec9e9946860f8c354a8e7616c8d27
SHA512 eceac10971a63767e5b4f2aba8c56be2d412a04f28251a84791f8f44ac6e7bb89ca6efb2c5f15cb23960c37cd4da6e2109244c89e7c5d6f2f930fab8940e8942
SSDEEP 3072:oX1CjLCrdBUn5b2RvEwpAV/uR/rulGL0KPF9Sp:84jLWde12Rcwp8uAk00F9W
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21493

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID CreateMutexW GetConsoleAliasesLengthW InterlockedIncrement VerSetConditionMask GetConsoleAliasA GetFileAttributesExA WaitNamedPipeW SetCommTimeouts EnumResourceTypesA LoadLibraryW Sleep GetFileAttributesA DnsHostnameToComputerNameW GetConsoleAliasW WriteConsoleW IsBadWritePtr GetGeoInfoA GetCompressedFileSizeA RaiseException GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA LoadLibraryA WriteConsoleA LocalAlloc CreateEventW AddAtomA FoldStringA FindNextFileA GetModuleHandleA SetFileShortNameA ReadConsoleInputW LCMapStringW LocalFileTimeToFileTime GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP CreateFileA CloseHandle

user32

ClientToScreen

Sharing