file[.]exe | Triage™

General

Target
file.exe
Size 194KB
Sample221020-kzfhpsefdj
SHA256 18aa090e0b3d0a2a34083e13726f78c8efd60cf5c0a425859a4fa2dfd6330423
MD5 e23c95d91c7786c48e5273833610046f
SHA1 cafcb78b479773cb1ddd5dfeeb3861e967a3772c
SHA512 061c8716a8c14d7fa1527a5b86e94c1c5b6348d095bd3d64ea4db8e66717de91a2b411c22a4d5fa01c622d82118d2037cf3faefa6de7adc54d648c3daefc2697
SSDEEP 3072:6VXmjRFVXL0tfRw05oEZJfrR/jaPDsexSFqnuFMnN0K3/dRhz:oGRFdLCZwoZJfJkDRjnuFO0gx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 194KB

file.exe

IMPHASH 02ad202c61376f5d7f99bc314f6638e5
SHA256 18aa090e0b3d0a2a34083e13726f78c8efd60cf5c0a425859a4fa2dfd6330423
MD5 e23c95d91c7786c48e5273833610046f
SHA1 cafcb78b479773cb1ddd5dfeeb3861e967a3772c
SHA512 061c8716a8c14d7fa1527a5b86e94c1c5b6348d095bd3d64ea4db8e66717de91a2b411c22a4d5fa01c622d82118d2037cf3faefa6de7adc54d648c3daefc2697
SSDEEP 3072:6VXmjRFVXL0tfRw05oEZJfrR/jaPDsexSFqnuFMnN0K3/dRhz:oGRFdLCZwoZJfJkDRjnuFO0gx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21621

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID VerSetConditionMask GetConsoleAliasA InterlockedDecrement SetFirmwareEnvironmentVariableA HeapFree CreateHardLinkA GetConsoleAliasesLengthA WaitNamedPipeW TzSpecificLocalTimeToSystemTime EnumResourceTypesA LoadLibraryW Sleep GetFileAttributesA GetConsoleAliasW WriteConsoleW GetGeoInfoA RaiseException LCMapStringA GetLastError GetProcAddress VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA FindNextFileA GetModuleHandleA GetCommTimeouts CreateMutexA GetFileAttributesExW SetFileShortNameA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA CloseHandle

user32

ClientToScreen

Sharing