file[.]exe | Triage™

General

Target
file.exe
Size 355KB
Sample221022-twc3vaeccn
SHA256 003a9e32b95bb8360d1bebe5f0f569fb39c33bcfac0a3fcc085a97ae1390d5c4
MD5 211a46e81252170e4f1f488355f1dcb4
SHA1 7c83dcc124ed9c671767f5d4a6d8ea9e3f773c0b
SHA512 7b6cd980ee761c5a820c7800f43f20e4039a96dcb8e91e5d9183ea52a61d56d4652d2698c54969eb7fbe1d18b2ee8e7a708f33cb9563b1dffc46fa0330a2224b
SSDEEP 6144:pJeLBFucFekfVw/+xRAbIz1X7BlCpcsjI89KMClr6YS:pJedFfZ+M1XdlCpcsD9KR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 355KB

file.exe

IMPHASH 948229edbcf907989aa1bdb70732da32
SHA256 003a9e32b95bb8360d1bebe5f0f569fb39c33bcfac0a3fcc085a97ae1390d5c4
MD5 211a46e81252170e4f1f488355f1dcb4
SHA1 7c83dcc124ed9c671767f5d4a6d8ea9e3f773c0b
SHA512 7b6cd980ee761c5a820c7800f43f20e4039a96dcb8e91e5d9183ea52a61d56d4652d2698c54969eb7fbe1d18b2ee8e7a708f33cb9563b1dffc46fa0330a2224b
SSDEEP 6144:pJeLBFucFekfVw/+xRAbIz1X7BlCpcsjI89KMClr6YS:pJedFfZ+M1XdlCpcsD9KR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21233

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetComputerNameW GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing