file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample221022-2d8qssfcek
SHA256 fd55f2340a1436175df2196ec3a11bf27a64ec2a764c3f61cb35e124a27657bc
MD5 ae0d11ba3e77dc1e8da3ea979fe32ce4
SHA1 f97fbb6b581558172d2f7067dbac6a8fe6837daa
SHA512 005bd920c52151ee370322d5193c785fcdeca67f040367c94d79264275cd86f584f4cc0cc95faa77e27062c22f553f6398aea369589448ce0015e520e5ca5c72
SSDEEP 3072:DXaqpeLVTicFsmzZ529Zr6kDZv9F/W0Wc15FlFjQr41uMAWnz8PDfLQKIl9Vfv:7DsL4cFRzm6CTFe0Wc1JU40b1vpsVfv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH a4f2eb6f530f70bf0bd87392bfbcd7f1
SHA256 fd55f2340a1436175df2196ec3a11bf27a64ec2a764c3f61cb35e124a27657bc
MD5 ae0d11ba3e77dc1e8da3ea979fe32ce4
SHA1 f97fbb6b581558172d2f7067dbac6a8fe6837daa
SHA512 005bd920c52151ee370322d5193c785fcdeca67f040367c94d79264275cd86f584f4cc0cc95faa77e27062c22f553f6398aea369589448ce0015e520e5ca5c72
SSDEEP 3072:DXaqpeLVTicFsmzZ529Zr6kDZv9F/W0Wc15FlFjQr41uMAWnz8PDfLQKIl9Vfv:7DsL4cFRzm6CTFe0Wc1JU40b1vpsVfv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21217

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP CreateFileA

Sharing