file[.]exe | Triage™

General

Target
file.exe
Size 227KB
Sample221021-v2j9saggcl
SHA256 dd6f00fd0ea49dc42073ac888654aec459d0fa364290650f27f6d340f01df626
MD5 3954baeef03b6c26d051ebd9a701b23f
SHA1 2e2f502fb15bfa3eb5db4ae1ad1fad1988a387b3
SHA512 79bdba76527838980f1526500b0b306c795e1ef04bcc065a2b98be14553499affbad96324a6525b4f421e501f5a8fd3f3c3fbeaa4ac2850607019f653936fccf
SSDEEP 3072:NXSGLLSkYjOQhO5umxDISfgQ4xrmsnWwXckGXTEyX6g0s3OO8ur:JFLLSkCOQhMDjmmsnZckGT7ym
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 227KB

file.exe

IMPHASH 83aec8d33ff1d2ed6e490bde788f9850
SHA256 dd6f00fd0ea49dc42073ac888654aec459d0fa364290650f27f6d340f01df626
MD5 3954baeef03b6c26d051ebd9a701b23f
SHA1 2e2f502fb15bfa3eb5db4ae1ad1fad1988a387b3
SHA512 79bdba76527838980f1526500b0b306c795e1ef04bcc065a2b98be14553499affbad96324a6525b4f421e501f5a8fd3f3c3fbeaa4ac2850607019f653936fccf
SSDEEP 3072:NXSGLLSkYjOQhO5umxDISfgQ4xrmsnWwXckGXTEyX6g0s3OO8ur:JFLLSkCOQhMDjmmsnZckGT7ym
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22021

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID InterlockedIncrement VerSetConditionMask GetConsoleAliasA WaitNamedPipeA HeapFree SetComputerNameW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW LoadLibraryW Sleep GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW GetGeoInfoA RaiseException SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW LCMapStringW GetStartupInfoW MultiByteToWideChar GetLastError ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetFilePointer ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP HeapSize CloseHandle CreateFileA

Sharing