file[.]exe | Triage™

General

Target
file.exe
Size 226KB
Sample221022-hcb6nabbf5
SHA256 fabddc21ca17663144ec1d501d85be2aab8bf9ffaa2f0a8a16eb24ea30dcd7e1
MD5 bc7e7129e5d7ec917b440765f68ab329
SHA1 78ef7a0d163acf812ff32ffd33ecad3ed2e16883
SHA512 e6815949d1a53495b62cb7501cf663566d37827a43d165db0e51946269d7fd45690c24a228f675e097130d5463a56b4a74b4ceebd68a4ef07b055af56c47e7ac
SSDEEP 3072:LAXTJiLlnQA1V95nQ26SrIwyJSJdR3UBTYmHNj/6QokFbzF:otiLlQA1q26SYYop/6QdbZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 226KB

file.exe

IMPHASH 4a97248bf86b2a2f1931e5fbe44f7a99
SHA256 fabddc21ca17663144ec1d501d85be2aab8bf9ffaa2f0a8a16eb24ea30dcd7e1
MD5 bc7e7129e5d7ec917b440765f68ab329
SHA1 78ef7a0d163acf812ff32ffd33ecad3ed2e16883
SHA512 e6815949d1a53495b62cb7501cf663566d37827a43d165db0e51946269d7fd45690c24a228f675e097130d5463a56b4a74b4ceebd68a4ef07b055af56c47e7ac
SSDEEP 3072:LAXTJiLlnQA1V95nQ26SrIwyJSJdR3UBTYmHNj/6QokFbzF:otiLlQA1q26SYYop/6QdbZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22289

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID LoadResource VerSetConditionMask GetConsoleAliasA InterlockedDecrement WaitNamedPipeA HeapFree SetComputerNameW GetModuleHandleW GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW GetGeoInfoA RaiseException SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW LCMapStringW GetStartupInfoW MultiByteToWideChar GetLastError ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing