file[.]exe | Triage™

General

Target
file.exe
Size 355KB
Sample221022-3qkeeafdd7
SHA256 f4145c65b81d7c2b1fbb05979f4452ac47e91ecc8f3ebb1bca0bfaeb38f2b015
MD5 fb92cf8aaf78a86af8afcff1e20ec36c
SHA1 860e7c12f50149213c0f351fc41e9d5f3fd16721
SHA512 45bde568df2a802c494b584c7a1e6f26bc435f5f70d51b81d52855c47440eac8953f59af59f6b35ca4437baa2404077374db05cd57238f6e8381cda77569ca6f
SSDEEP 6144:VD7LG2kKZnKNIyCIYsHUuR/e1QM5gcxY0fJ60BBw/cYQrzxjoN/QgcL:VD7a2kKJK+BpsHFR/VMOcxY040Pw/Qrv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 355KB

file.exe

IMPHASH a4f2eb6f530f70bf0bd87392bfbcd7f1
SHA256 f4145c65b81d7c2b1fbb05979f4452ac47e91ecc8f3ebb1bca0bfaeb38f2b015
MD5 fb92cf8aaf78a86af8afcff1e20ec36c
SHA1 860e7c12f50149213c0f351fc41e9d5f3fd16721
SHA512 45bde568df2a802c494b584c7a1e6f26bc435f5f70d51b81d52855c47440eac8953f59af59f6b35ca4437baa2404077374db05cd57238f6e8381cda77569ca6f
SSDEEP 6144:VD7LG2kKZnKNIyCIYsHUuR/e1QM5gcxY0fJ60BBw/cYQrzxjoN/QgcL:VD7a2kKJK+BpsHFR/VMOcxY040Pw/Qrv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21217

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP CreateFileA

Sharing