file[.]exe | Triage™

General

Target
file.exe
Size 224KB
Sample221022-w26nfsecd9
SHA256 d4ea6fc94f1dfe5ef26cea74ed0edbc0feec489327c51d0f28eab2e11a8f0b3c
MD5 b046744a15e2ebd28944fd7ccb996a3a
SHA1 4921e1a0599379fb3c7708eba4c1a6a440460394
SHA512 17067d8fb08b3ba31c809d65350cd3016e26a6f6b4e07cd9f401cec4a6e2dfb61f422ca6131d4559c67277e117aa011e836b3dcdc46b59744aaae01ad957a8dc
SSDEEP 3072:AXVukLxFxHfb5A5Xa1+poo1D3n13XffVfnXfyMAvoxyvICG9:0skLtHzBopoopF3nVfnPx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH 948229edbcf907989aa1bdb70732da32
SHA256 d4ea6fc94f1dfe5ef26cea74ed0edbc0feec489327c51d0f28eab2e11a8f0b3c
MD5 b046744a15e2ebd28944fd7ccb996a3a
SHA1 4921e1a0599379fb3c7708eba4c1a6a440460394
SHA512 17067d8fb08b3ba31c809d65350cd3016e26a6f6b4e07cd9f401cec4a6e2dfb61f422ca6131d4559c67277e117aa011e836b3dcdc46b59744aaae01ad957a8dc
SSDEEP 3072:AXVukLxFxHfb5A5Xa1+poo1D3n13XffVfnXfyMAvoxyvICG9:0skLtHzBopoopF3nVfnPx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21233

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetComputerNameW GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing