file[.]exe | Triage™

General

Target
file.exe
Size 359KB
Sample221021-ysnsdsdeek
SHA256 9b3c936ca4fe043d2de3842d446c5030d0053e8ac21c09b5ccf4a3eeda12b745
MD5 018b96b162c26066f79d45175fc23613
SHA1 1877d9dd50ad0e2a08a5398e76b352a6e01b0646
SHA512 daddecbd203740b0da26db13a13023c2162443725582d71b3c1b287710dcacba7a72672267b2cfafa379dfa30743f9db97b5a7759379e258c6c3975811118781
SSDEEP 6144:clULMsvAMFLhVKFNBMZCww2F1/Ip11dPjZ2QmdX+BNzpToLv9S:clUAsoMFLh8FNBMZAA/IvPjZuczk
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 359KB

file.exe

IMPHASH bc5a05e947eb61731a4e3024a4f4b617
SHA256 9b3c936ca4fe043d2de3842d446c5030d0053e8ac21c09b5ccf4a3eeda12b745
MD5 018b96b162c26066f79d45175fc23613
SHA1 1877d9dd50ad0e2a08a5398e76b352a6e01b0646
SHA512 daddecbd203740b0da26db13a13023c2162443725582d71b3c1b287710dcacba7a72672267b2cfafa379dfa30743f9db97b5a7759379e258c6c3975811118781
SSDEEP 6144:clULMsvAMFLhVKFNBMZCww2F1/Ip11dPjZ2QmdX+BNzpToLv9S:clUAsoMFLh8FNBMZAA/IvPjZuczk
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22037

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID LoadResource VerSetConditionMask GetConsoleAliasA InterlockedDecrement WaitNamedPipeA HeapFree SetComputerNameW GetModuleHandleW GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW GetGeoInfoA RaiseException SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW LCMapStringW GetStartupInfoW MultiByteToWideChar GetLastError ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP HeapSize CloseHandle CreateFileA

Sharing