file[.]exe | Triage™

General

Target
file.exe
Size 224KB
Sample221022-n6bd4sdbcj
SHA256 42987c2eefa43dfcd75aeeffd2da2821ce073a563e6a9eb611fe98c0f4f23c00
MD5 7d38ef94876e3529f9502d1e14323daf
SHA1 0bf8edcc2d59acc57a6880c8fef8d1576633d9d5
SHA512 d2459939213e184dd6d0434492f79bba55708bc4a75196f794f772d56881fcf6e0a3c9c4dc1e65e943d10ad71173afa4e9f5796490c9b02fdcb19a689d952046
SSDEEP 3072:gXhJqKL7qYI2Xy58aELqXrXhB3Tp9+QQOW6sIEimpS:U1LhRXJaELqXzhB3TpAQQOW6sI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH 620df7f1397c0c9696f14e115c5d0ca6
SHA256 42987c2eefa43dfcd75aeeffd2da2821ce073a563e6a9eb611fe98c0f4f23c00
MD5 7d38ef94876e3529f9502d1e14323daf
SHA1 0bf8edcc2d59acc57a6880c8fef8d1576633d9d5
SHA512 d2459939213e184dd6d0434492f79bba55708bc4a75196f794f772d56881fcf6e0a3c9c4dc1e65e943d10ad71173afa4e9f5796490c9b02fdcb19a689d952046
SSDEEP 3072:gXhJqKL7qYI2Xy58aELqXrXhB3Tp9+QQOW6sIEimpS:U1LhRXJaELqXzhB3TpAQQOW6sI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21201

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA HeapFree SetComputerNameW GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesLengthA GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing