file[.]exe | Triage™

General

Target
file.exe
Size 224KB
Sample221022-xe665sech3
SHA256 e7d2e1acc524062824bf4741a9ff10c069605e402e54b603b5dfd9c4acdc3ffd
MD5 2b88f58053144db41487693d8b2c3bd0
SHA1 a9d83e9b4386b2dc954af8b094bba6121aa2fbe1
SHA512 5bcc69f7d20ae60e7fbb084fd0475d0452521ffcfeffb6b72f60fb35b7f4fb36504d1bbe122acb45f6dbaed9d48f5f6b0c87cf24e543da0b7e2d8e421eaa4211
SSDEEP 3072:QXiBzLDZXMWb5A5dN0dLXg1g65Oa51DwgVQjqApLkj5Jek:ECzLhMSt6YAcgLApLkj5J
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH 948229edbcf907989aa1bdb70732da32
SHA256 e7d2e1acc524062824bf4741a9ff10c069605e402e54b603b5dfd9c4acdc3ffd
MD5 2b88f58053144db41487693d8b2c3bd0
SHA1 a9d83e9b4386b2dc954af8b094bba6121aa2fbe1
SHA512 5bcc69f7d20ae60e7fbb084fd0475d0452521ffcfeffb6b72f60fb35b7f4fb36504d1bbe122acb45f6dbaed9d48f5f6b0c87cf24e543da0b7e2d8e421eaa4211
SSDEEP 3072:QXiBzLDZXMWb5A5dN0dLXg1g65Oa51DwgVQjqApLkj5Jek:ECzLhMSt6YAcgLApLkj5J
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21233

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetComputerNameW GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing