file[.]exe | Triage™

General

Target
file.exe
Size 224KB
Sample221022-2dmtbsfcdm
SHA256 67f37873b31a614aaff0f134fd474843c6dcf12cf5dd41102d2c691c0b028601
MD5 6609152c1e8e05e0970fd99732eecd65
SHA1 316a138d9ba79729daad5e1f35e84a1c448de8e6
SHA512 47b2852a033b0ca46371bd34d38551c6501ab9f272d92e4a03330bc96adced8eb95680547d38e756d5677e763938cc7d5c6ce1446b6ae3258dd9951b3dec341c
SSDEEP 3072:yXihzLm4sFXu2Z5RZX0OGEpqPVY6nF0uHRqyUDSxIz8An:yEzL8Fe2NZuHnFvxqDWIzp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH a4f2eb6f530f70bf0bd87392bfbcd7f1
SHA256 67f37873b31a614aaff0f134fd474843c6dcf12cf5dd41102d2c691c0b028601
MD5 6609152c1e8e05e0970fd99732eecd65
SHA1 316a138d9ba79729daad5e1f35e84a1c448de8e6
SHA512 47b2852a033b0ca46371bd34d38551c6501ab9f272d92e4a03330bc96adced8eb95680547d38e756d5677e763938cc7d5c6ce1446b6ae3258dd9951b3dec341c
SSDEEP 3072:yXihzLm4sFXu2Z5RZX0OGEpqPVY6nF0uHRqyUDSxIz8An:yEzL8Fe2NZuHnFvxqDWIzp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21217

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP CreateFileA

Sharing