file[.]exe | Triage™

General

Target
file.exe
Size 356KB
Sample221022-qthnrsdcf6
SHA256 0d9623fa6d328b356a3799643b6fc4ac111d96ece622adebd10cbd4d9e7f0278
MD5 fe9e4e40797cf256f521802f00b22659
SHA1 fc95bf4d492bff6273f31cdf260d51a4191ebf61
SHA512 9594955bd21734f1ecbb12b64eebb7730e2f285fe4c32506d7085a261c7c46e743c9a38d7752fff7948b5037b5cec986cd2d1f8c0a0e9b5ed075b692c617fa18
SSDEEP 6144:sJPL0vdMCDk03kk3RI3GM5bo8buWGoBStPMdLbeocJIYLCxW:sB4vQyX3R1cb8FtSiocl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 356KB

file.exe

IMPHASH 58e9f95ed6d92653f27682257d068dc1
SHA256 0d9623fa6d328b356a3799643b6fc4ac111d96ece622adebd10cbd4d9e7f0278
MD5 fe9e4e40797cf256f521802f00b22659
SHA1 fc95bf4d492bff6273f31cdf260d51a4191ebf61
SHA512 9594955bd21734f1ecbb12b64eebb7730e2f285fe4c32506d7085a261c7c46e743c9a38d7752fff7948b5037b5cec986cd2d1f8c0a0e9b5ed075b692c617fa18
SSDEEP 6144:sJPL0vdMCDk03kk3RI3GM5bo8buWGoBStPMdLbeocJIYLCxW:sB4vQyX3R1cb8FtSiocl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21233

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA HeapFree SetComputerNameW GetSystemDefaultLCID GetConsoleAliasesLengthA GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException OpenMutexW SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing