file[.]exe | Triage™

General

Target
file.exe
Size 194KB
Sample221021-e5dcmscba7
SHA256 6e7b67782565701d2a06a8f63e297ba7b68c656412f91d1ea16aeebe4c46f6fa
MD5 0e70c10f110a8d3ebd896c096e509315
SHA1 8cb3b618beca9356c4830fe997203b28502f8592
SHA512 11dbec2fed47cc9dde67b8f20a9821d2995eb539e6302f062b2aff5809b38d548c03306af628a099cd14b50d005446b645c9aded6132e527744d4c404cade651
SSDEEP 3072:QXDvCLgLSYD5aKKhhhV57isSO7kcxcDPf0KpYid4:EDCLY9wLhvmCFxY02
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 194KB

file.exe

IMPHASH 3e6038f4356f890c26b700ce3212574e
SHA256 6e7b67782565701d2a06a8f63e297ba7b68c656412f91d1ea16aeebe4c46f6fa
MD5 0e70c10f110a8d3ebd896c096e509315
SHA1 8cb3b618beca9356c4830fe997203b28502f8592
SHA512 11dbec2fed47cc9dde67b8f20a9821d2995eb539e6302f062b2aff5809b38d548c03306af628a099cd14b50d005446b645c9aded6132e527744d4c404cade651
SSDEEP 3072:QXDvCLgLSYD5aKKhhhV57isSO7kcxcDPf0KpYid4:EDCLY9wLhvmCFxY02
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21333

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID InterlockedIncrement VerSetConditionMask GetConsoleAliasA WaitNamedPipeA SetFirmwareEnvironmentVariableA HeapFree SetComputerNameW GetFileAttributesExA GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW LoadLibraryW Sleep GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW GetGeoInfoA RaiseException SetLastError GetProcAddress VirtualAlloc IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA LCMapStringW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP HeapSize CreateFileA CloseHandle

user32

GetDC

Sharing