file[.]exe | Triage™

General

Target
file.exe
Size 356KB
Sample221022-zh5htsefc6
SHA256 a96538ece8662b0da63cbe74d64a5292dc5bd56f48bfe61cacd737bf8a18cb97
MD5 02e65b5dcadffec48f78eebabcf3a509
SHA1 68cbd7ce744a8643742c8b5cbfa69e1c8e3d94d7
SHA512 e88462bb243222fe6bfb80a545e94225e558ab9aaa9802f19d05e7f027337b19ef15e9b98c7daf70f0a284c54cb4f9741faba26fa2c6cb60ffd26647604f3b46
SSDEEP 6144:v80LDuBtWTmMWKVrdcO5HvI98xyPO9QGhYcucwk:v80XuBcT6upAexOOrYcucw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 356KB

file.exe

IMPHASH 948229edbcf907989aa1bdb70732da32
SHA256 a96538ece8662b0da63cbe74d64a5292dc5bd56f48bfe61cacd737bf8a18cb97
MD5 02e65b5dcadffec48f78eebabcf3a509
SHA1 68cbd7ce744a8643742c8b5cbfa69e1c8e3d94d7
SHA512 e88462bb243222fe6bfb80a545e94225e558ab9aaa9802f19d05e7f027337b19ef15e9b98c7daf70f0a284c54cb4f9741faba26fa2c6cb60ffd26647604f3b46
SSDEEP 6144:v80LDuBtWTmMWKVrdcO5HvI98xyPO9QGhYcucwk:v80XuBcT6upAexOOrYcucw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21233

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetComputerNameW GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing