file[.]exe | Triage™

General

Target
file.exe
Size 227KB
Sample221021-vctf6affan
SHA256 36fcd70ecc70524dcc35192b0482973befe933dfd53fe1afbf8da24e42eb6288
MD5 83f2392a9f78ec5f3ee0ca9b948f415b
SHA1 56a90630d9872d9b53d829edaa3819563dc35699
SHA512 96c2e958f39a811eab9dd1f6e175938d90d7e8f255d18c2563a3b1b76031d7ff446d41a7e6e66762737d065c7a8eb2668f678c6c4a233857c2ae785ed3de58fc
SSDEEP 3072:MXOYALYjdSQ8JO5n6ph893aGOif/qd9KiueapNDC904Y:IPALY5SQ8J961qd9x0nsY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 227KB

file.exe

IMPHASH 83aec8d33ff1d2ed6e490bde788f9850
SHA256 36fcd70ecc70524dcc35192b0482973befe933dfd53fe1afbf8da24e42eb6288
MD5 83f2392a9f78ec5f3ee0ca9b948f415b
SHA1 56a90630d9872d9b53d829edaa3819563dc35699
SHA512 96c2e958f39a811eab9dd1f6e175938d90d7e8f255d18c2563a3b1b76031d7ff446d41a7e6e66762737d065c7a8eb2668f678c6c4a233857c2ae785ed3de58fc
SSDEEP 3072:MXOYALYjdSQ8JO5n6ph893aGOif/qd9KiueapNDC904Y:IPALY5SQ8J961qd9x0nsY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22021

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID InterlockedIncrement VerSetConditionMask GetConsoleAliasA WaitNamedPipeA HeapFree SetComputerNameW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW LoadLibraryW Sleep GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW GetGeoInfoA RaiseException SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW LCMapStringW GetStartupInfoW MultiByteToWideChar GetLastError ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetFilePointer ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP HeapSize CloseHandle CreateFileA

Sharing