file[.]exe | Triage™

General

Target
file.exe
Size 359KB
Sample221021-znqa4afdcl
SHA256 1e120fcdb2d771ee3a1b169b5aab47a4321f8bd42688819e9e030cbbc8b9a88d
MD5 c35825f99fa58c9108e79050768aa385
SHA1 8afdce7bfc83e0510c0770f295f54393e9318f2e
SHA512 1f01915a5e24604cc3038e1527e6416a990977534de979ba04fd726688673e71e3c526668d1bc847086d204784cb9266d0eb20da6983afc5840d2de1161e633b
SSDEEP 6144:Dl+LgmmAtX2Xd1816cbRzlcwwCrnp7oqgzIRhHE0Ew7rpPC4/8VZ3rIbwS:Dl+0mrtGXT816cZywwC4UR60blg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 359KB

file.exe

IMPHASH bc5a05e947eb61731a4e3024a4f4b617
SHA256 1e120fcdb2d771ee3a1b169b5aab47a4321f8bd42688819e9e030cbbc8b9a88d
MD5 c35825f99fa58c9108e79050768aa385
SHA1 8afdce7bfc83e0510c0770f295f54393e9318f2e
SHA512 1f01915a5e24604cc3038e1527e6416a990977534de979ba04fd726688673e71e3c526668d1bc847086d204784cb9266d0eb20da6983afc5840d2de1161e633b
SSDEEP 6144:Dl+LgmmAtX2Xd1816cbRzlcwwCrnp7oqgzIRhHE0Ew7rpPC4/8VZ3rIbwS:Dl+0mrtGXT816cZywwC4UR60blg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22037

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID LoadResource VerSetConditionMask GetConsoleAliasA InterlockedDecrement WaitNamedPipeA HeapFree SetComputerNameW GetModuleHandleW GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW GetGeoInfoA RaiseException SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW LCMapStringW GetStartupInfoW MultiByteToWideChar GetLastError ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP HeapSize CloseHandle CreateFileA

Sharing