file[.]exe | Triage™

General

Target
file.exe
Size 341KB
Sample221020-vxkdzsfca4
SHA256 9ec361b46ddb18fa93896469cf4f6499f1d976d08bea8bcbc33e2738aea0d9cf
MD5 70e9e2ad654c7575ebea951ea1542186
SHA1 e2e76f7e3c11115ae302adea263b0186db84d71c
SHA512 d960874ad31bb5c524d019158a0f08e5686dac30f933cff3463ad02501466d17ec35093c329d98a1137ba3f62bf674283e74a36ea6609e65d8c1de747b3d645b
SSDEEP 6144:x33NL9XYVbfh3pEZ6JY1qMcmjvQnH2PL2KXBN0nr:xthX4bfW6JYQMT7AAhXBW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 341KB

file.exe

IMPHASH 07b403af92a54ebc39607926cde55697
SHA256 9ec361b46ddb18fa93896469cf4f6499f1d976d08bea8bcbc33e2738aea0d9cf
MD5 70e9e2ad654c7575ebea951ea1542186
SHA1 e2e76f7e3c11115ae302adea263b0186db84d71c
SHA512 d960874ad31bb5c524d019158a0f08e5686dac30f933cff3463ad02501466d17ec35093c329d98a1137ba3f62bf674283e74a36ea6609e65d8c1de747b3d645b
SSDEEP 6144:x33NL9XYVbfh3pEZ6JY1qMcmjvQnH2PL2KXBN0nr:xthX4bfW6JYQMT7AAhXBW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21653

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID InterlockedIncrement VerSetConditionMask GetConsoleAliasA SetFirmwareEnvironmentVariableA HeapFree SetComputerNameW CreateHardLinkA GetConsoleAliasesLengthA WaitNamedPipeW TzSpecificLocalTimeToSystemTime GlobalAlloc LoadLibraryW Sleep GetFileAttributesA GetConsoleAliasW WriteConsoleW GetGeoInfoA RaiseException LCMapStringA GetLastError SetLastError GetProcAddress VirtualAlloc IsValidCodePage LoadLibraryA LocalAlloc AddAtomW FoldStringA FindNextFileA GetModuleHandleA CreateMutexA GetFileAttributesExW SetFileShortNameA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA CloseHandle

user32

WindowFromDC

Resubmissions

Sharing