file[.]exe | Triage™

General

Target
file.exe
Size 503KB
Sample221021-whfmxshecp
SHA256 569ea2229b464fe4cbffdb473cff09912f91fb593a16be9003f38dc8c083a62a
MD5 0def05268b0108b6ee9cd20ee4765856
SHA1 723bacbed4e4a638a0cb7cf3402887b2854d35c3
SHA512 861fccaf17a9adc9d45ca792aebf4d560d3773e1db98e5eea32e85bd647cf500c16533ac5db6e240e42c1c57ae978f264aef62ff80bc2fdd427225c0353a906a
SSDEEP 6144:V3QZl6E8GjAK563R3MQDkH2eLnCm0AOvbOVpHwZljHHzKCj2USHs7tzoekTEACRD:V2l6E8GjAVR3JpZBOHeT2vsBZkKdh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 503KB

file.exe

IMPHASH 787d271a2df462be9e8efbef70e9c88f
SHA256 569ea2229b464fe4cbffdb473cff09912f91fb593a16be9003f38dc8c083a62a
MD5 0def05268b0108b6ee9cd20ee4765856
SHA1 723bacbed4e4a638a0cb7cf3402887b2854d35c3
SHA512 861fccaf17a9adc9d45ca792aebf4d560d3773e1db98e5eea32e85bd647cf500c16533ac5db6e240e42c1c57ae978f264aef62ff80bc2fdd427225c0353a906a
SSDEEP 6144:V3QZl6E8GjAK563R3MQDkH2eLnCm0AOvbOVpHwZljHHzKCj2USHs7tzoekTEACRD:V2l6E8GjAVR3JpZBOHeT2vsBZkKdh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40443

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess CreateFileW RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing