file[.]exe | Triage™

General

Target
file.exe
Size 193KB
Sample221021-bdsfpseae4
SHA256 3cbcc012cbbef46174c926b269a38e157bcbb02da83ef2fb4478d4d6e821c673
MD5 378aa9513d43ab0502ff20063fbf4adf
SHA1 d3b06d16b1c1bccdc0489f8014893cf33e028729
SHA512 75dcee897b9c275bcf7353535ef3720f2b5d41cb951e0627e2abcde5dc0f8556bf76f9c5db42defeb1b9cc7c5d924e027db52dc155b9a87b48238d04a4d006d2
SSDEEP 3072:4XONILLxZOC5WZDEk5Ml/rx0yGhS0KtW7xN0K4LOl:MoIL9g5pyl107hS0MW7g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 193KB

file.exe

IMPHASH ee783376aeb5a6ccd1e2676f1a5f0e82
SHA256 3cbcc012cbbef46174c926b269a38e157bcbb02da83ef2fb4478d4d6e821c673
MD5 378aa9513d43ab0502ff20063fbf4adf
SHA1 d3b06d16b1c1bccdc0489f8014893cf33e028729
SHA512 75dcee897b9c275bcf7353535ef3720f2b5d41cb951e0627e2abcde5dc0f8556bf76f9c5db42defeb1b9cc7c5d924e027db52dc155b9a87b48238d04a4d006d2
SSDEEP 3072:4XONILLxZOC5WZDEk5Ml/rx0yGhS0KtW7xN0K4LOl:MoIL9g5pyl107hS0MW7g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21317

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID InterlockedIncrement VerSetConditionMask GetConsoleAliasA WaitNamedPipeA SetFirmwareEnvironmentVariableA HeapFree SetComputerNameW GetFileAttributesExA GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GlobalAlloc LoadLibraryW Sleep GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW GetGeoInfoA RaiseException SetLastError GetProcAddress VirtualAlloc IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA LCMapStringW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP HeapSize CreateFileA CloseHandle

user32

GetDC

Sharing