file[.]exe | Triage™

General

Target
file.exe
Size 355KB
Sample221022-pxb5qadcfl
SHA256 b9db7a724624df1aa5eba363058a2daed37379edf3ad3ba6e7f5adf28b4ea044
MD5 6d2812bef0ebf2711b9e5d3c205761c9
SHA1 4976cf6428d3ee3c823e4c0f34e55f3c4014da39
SHA512 fc258cf54a678248e08677a696d16a21b0e6c793a9ac65b45e8d9ac61311ad5e28b2b990a2132284818c6145acb0bf4263c17742913f0182f680127b7d1a3f95
SSDEEP 6144:xFLvvfaVUCAbjKg/EaA8DcGWpZzkWuvZ4rfhGg/N/NCojLnIKHmaT4x:xFTvfBC6jKg//AfpZ2vZKQgl1CoX3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 355KB

file.exe

IMPHASH 620df7f1397c0c9696f14e115c5d0ca6
SHA256 b9db7a724624df1aa5eba363058a2daed37379edf3ad3ba6e7f5adf28b4ea044
MD5 6d2812bef0ebf2711b9e5d3c205761c9
SHA1 4976cf6428d3ee3c823e4c0f34e55f3c4014da39
SHA512 fc258cf54a678248e08677a696d16a21b0e6c793a9ac65b45e8d9ac61311ad5e28b2b990a2132284818c6145acb0bf4263c17742913f0182f680127b7d1a3f95
SSDEEP 6144:xFLvvfaVUCAbjKg/EaA8DcGWpZzkWuvZ4rfhGg/N/NCojLnIKHmaT4x:xFTvfBC6jKg//AfpZ2vZKQgl1CoX3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21201

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA HeapFree SetComputerNameW GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesLengthA GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing