file[.]exe | Triage™

General

Target
file.exe
Size 199KB
Sample221021-pebq8sbbfl
SHA256 f1f053c7dcc5cdd0d65a8420acdaa7f0d45d8b9406a098e3e2b622d498e7cf35
MD5 daed8129439edb464becc2a544b55f6a
SHA1 88364358057e7347e222dbcab143c11dda4c4647
SHA512 77d7b1b842381acae2fe700fa01aebb5809cbe00e2e37b4a6e1f8eaf3846d30e7a7ed20f9ccd6511d87b4eedc5b96e46e2864b5c41edde23ae2ec54184448138
SSDEEP 3072:/XS58LL3FQfz5vtOOi4fTxBo0MUhRURlVaoZGfT5:vq8LLFQfnOOxDMUhuVJZG5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 199KB

file.exe

IMPHASH 83aec8d33ff1d2ed6e490bde788f9850
SHA256 f1f053c7dcc5cdd0d65a8420acdaa7f0d45d8b9406a098e3e2b622d498e7cf35
MD5 daed8129439edb464becc2a544b55f6a
SHA1 88364358057e7347e222dbcab143c11dda4c4647
SHA512 77d7b1b842381acae2fe700fa01aebb5809cbe00e2e37b4a6e1f8eaf3846d30e7a7ed20f9ccd6511d87b4eedc5b96e46e2864b5c41edde23ae2ec54184448138
SSDEEP 3072:/XS58LL3FQfz5vtOOi4fTxBo0MUhRURlVaoZGfT5:vq8LLFQfnOOxDMUhuVJZG5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22021

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID InterlockedIncrement VerSetConditionMask GetConsoleAliasA WaitNamedPipeA HeapFree SetComputerNameW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW LoadLibraryW Sleep GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW GetGeoInfoA RaiseException SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW LCMapStringW GetStartupInfoW MultiByteToWideChar GetLastError ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetFilePointer ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP HeapSize CloseHandle CreateFileA

Sharing