file[.]exe | Triage™

General

Target
file.exe
Size 229KB
Sample221019-3hpddsdad7
SHA256 075310cff3a6a0b37caa0e12167c938d13c0c8fa812c4faaa53ee42fd600770f
MD5 303c787c90e201c09527ef5a42e114af
SHA1 d4ab9151196d6561940970314e97ba9d4c043e6f
SHA512 a1655fd9b26e9be14be1e2711da883e68a6484aa30b5558b9af5234dfae17f3651450ccd27068e0bbd0a2c4ed7c619db930ad2a6f947aae07b8afae80fc4364e
SSDEEP 3072:LWnGoZpZPBR2wLT15fWhPm9ydd8Kni6gBD1MhInGjPyW:LWnplJLh5f43d8n9BD1gP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 229KB

file.exe

IMPHASH 01398082e8bfbed2eb9e8d68648bfc54
SHA256 075310cff3a6a0b37caa0e12167c938d13c0c8fa812c4faaa53ee42fd600770f
MD5 303c787c90e201c09527ef5a42e114af
SHA1 d4ab9151196d6561940970314e97ba9d4c043e6f
SHA512 a1655fd9b26e9be14be1e2711da883e68a6484aa30b5558b9af5234dfae17f3651450ccd27068e0bbd0a2c4ed7c619db930ad2a6f947aae07b8afae80fc4364e
SSDEEP 3072:LWnGoZpZPBR2wLT15fWhPm9ydd8Kni6gBD1MhInGjPyW:LWnplJLh5f43d8n9BD1gP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44150

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameW LocalSize InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW FindNextFileW CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW IsBadWritePtr FindResourceA GetComputerNameExA GetProcAddress LocalAlloc GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructA GetACP GetProcessAffinityMask GlobalFindAtomW WriteConsoleW InterlockedIncrement CreateActCtxA InitializeCriticalSection GetStringTypeExA OpenMutexA CancelDeviceWakeupRequest RtlCaptureContext EnterCriticalSection GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange EnumDateFormatsA EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA CreateTimerQueue GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing