file[.]exe | Triage™

General

Target
file.exe
Size 192KB
Sample221020-ljrrgaffdk
SHA256 76ea853c6a90b30ee7bedc905f2a0c5ece9062d098aed35db3de361c77f70a76
MD5 a759c799500f95284ea4f9613279551a
SHA1 881a1d0a9657d14b90f74d2e55ba4bc502f506b3
SHA512 12336b351206a3f37a8a0acc313e5b5261d763f9e9b79877404a2ea498c0204daf45c5a4a663647039dc4f14dceae4beb980ff32ce03ce3d6bdd89065acdfc2a
SSDEEP 3072:hXmjtpJKL4l4jo5JCEMS293vYAEYW5p3Wauci1N0KIAZp0d:FGtpcLeglx3vYAEY6p3WaG1N00
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 192KB

file.exe

IMPHASH 9b6d31a33dab7015fed5bf1bdd33a7d1
SHA256 76ea853c6a90b30ee7bedc905f2a0c5ece9062d098aed35db3de361c77f70a76
MD5 a759c799500f95284ea4f9613279551a
SHA1 881a1d0a9657d14b90f74d2e55ba4bc502f506b3
SHA512 12336b351206a3f37a8a0acc313e5b5261d763f9e9b79877404a2ea498c0204daf45c5a4a663647039dc4f14dceae4beb980ff32ce03ce3d6bdd89065acdfc2a
SSDEEP 3072:hXmjtpJKL4l4jo5JCEMS293vYAEYW5p3Wauci1N0KIAZp0d:FGtpcLeglx3vYAEY6p3WaG1N00
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21637

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID VerSetConditionMask GetConsoleAliasA InterlockedDecrement SetFirmwareEnvironmentVariableA HeapFree CreateHardLinkA GetConsoleAliasesLengthA WaitNamedPipeW TzSpecificLocalTimeToSystemTime EnumResourceTypesA LoadLibraryW Sleep GetFileAttributesA GetConsoleAliasW WriteConsoleW GetGeoInfoA RaiseException LCMapStringA GetLastError SetLastError GetProcAddress VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA FindNextFileA GetModuleHandleA GetCommTimeouts CreateMutexA GetFileAttributesExW SetFileShortNameA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA CloseHandle

user32

WindowFromDC

Sharing