file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221020-enhwssdcf5
SHA256 2a166a6ecb2c21e8fc1bf455cb53f08ab62dea3c2d905bf7bd54ecbb569531e5
MD5 46017e962ae3b76d86177c74d6c54257
SHA1 b413251a1bd5f8d51220eac070b1df4599a24ed6
SHA512 16a680310e1e07af42ecbe2d71ef9b59e9b9388f281dc0e843b707194671c98cca5032cad33ac9e4ad6230d59d8b6b9b204f51e6ef45d7e9d0cbbe262dcb00a4
SSDEEP 3072:lK2z/Z2BPFLlisLovrfWeMm9yLMizeFkFP7NVhqAkO5aUGiFYyaa:lKg2nBpLSrf7wpzL3L01CNa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 01398082e8bfbed2eb9e8d68648bfc54
SHA256 2a166a6ecb2c21e8fc1bf455cb53f08ab62dea3c2d905bf7bd54ecbb569531e5
MD5 46017e962ae3b76d86177c74d6c54257
SHA1 b413251a1bd5f8d51220eac070b1df4599a24ed6
SHA512 16a680310e1e07af42ecbe2d71ef9b59e9b9388f281dc0e843b707194671c98cca5032cad33ac9e4ad6230d59d8b6b9b204f51e6ef45d7e9d0cbbe262dcb00a4
SSDEEP 3072:lK2z/Z2BPFLlisLovrfWeMm9yLMizeFkFP7NVhqAkO5aUGiFYyaa:lKg2nBpLSrf7wpzL3L01CNa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44150

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameW LocalSize InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW FindNextFileW CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW IsBadWritePtr FindResourceA GetComputerNameExA GetProcAddress LocalAlloc GetStringTypeW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructA GetACP GetProcessAffinityMask GlobalFindAtomW WriteConsoleW InterlockedIncrement CreateActCtxA InitializeCriticalSection GetStringTypeExA OpenMutexA CancelDeviceWakeupRequest RtlCaptureContext EnterCriticalSection GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange EnumDateFormatsA EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA CreateTimerQueue GetLogicalDriveStringsW GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing