file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample221022-yj8ffaedh3
SHA256 d973050525f2d2cf4d238bd94b7ad0b3cee7fbbb7571f0906771c978d51cf899
MD5 6e38c595a50e4e879128caa8cfb40eaf
SHA1 0ccef1fb53efb8912cd16c6141b573db29f96e6e
SHA512 f4ec9e85b76d5e1cbe2a2b820f8366b522c2b339edc9ca8ae3a68eb37a59bbf829da0278294a121ae301a243b73e865f2e522e92b8e8ec247a7dc90e13aca3be
SSDEEP 3072:TuXDKtLWjh6SfL50y7nNPS8o99WlvpOque+6A/I++iSd/rkfo9eRrfPB:aWtLkc21rNK9WlvYHw9xqgurfP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH 948229edbcf907989aa1bdb70732da32
SHA256 d973050525f2d2cf4d238bd94b7ad0b3cee7fbbb7571f0906771c978d51cf899
MD5 6e38c595a50e4e879128caa8cfb40eaf
SHA1 0ccef1fb53efb8912cd16c6141b573db29f96e6e
SHA512 f4ec9e85b76d5e1cbe2a2b820f8366b522c2b339edc9ca8ae3a68eb37a59bbf829da0278294a121ae301a243b73e865f2e522e92b8e8ec247a7dc90e13aca3be
SSDEEP 3072:TuXDKtLWjh6SfL50y7nNPS8o99WlvpOque+6A/I++iSd/rkfo9eRrfPB:aWtLkc21rNK9WlvYHw9xqgurfP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21249

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetComputerNameW GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing