file[.]exe | Triage™

General

Target
file.exe
Size 503KB
Sample221022-e9yjdaaff5
SHA256 e1b703cb0718ac38b01753facb2dd66a8c60d5af82f190f00f90d3a2f53a8a4c
MD5 d7a1786ef98fa4178cf898a312016c36
SHA1 04e193b2a60edfc0f0ac0bee321486fc32f2a8eb
SHA512 ad5c2cc686d89bfb5bd1203973d7d223ac0989a950ffb430e67ec0edbecb56d466be3cd310a7723b4c0148da4e1befe9e2938ec342a9df46336ee75d1c0cbbe9
SSDEEP 12288:d2l6E8GjAVR3JpZMS3NyF4vmxbwtyHr7h5IWRdh:i8GmpGS3Ny5bwEHZ1F
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 503KB

file.exe

IMPHASH 787d271a2df462be9e8efbef70e9c88f
SHA256 e1b703cb0718ac38b01753facb2dd66a8c60d5af82f190f00f90d3a2f53a8a4c
MD5 d7a1786ef98fa4178cf898a312016c36
SHA1 04e193b2a60edfc0f0ac0bee321486fc32f2a8eb
SHA512 ad5c2cc686d89bfb5bd1203973d7d223ac0989a950ffb430e67ec0edbecb56d466be3cd310a7723b4c0148da4e1befe9e2938ec342a9df46336ee75d1c0cbbe9
SSDEEP 12288:d2l6E8GjAVR3JpZMS3NyF4vmxbwtyHr7h5IWRdh:i8GmpGS3Ny5bwEHZ1F
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40443

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess CreateFileW RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing