file[.]exe | Triage™

General

Target
file.exe
Size 350KB
Sample221023-2ar9msdahp
SHA256 d285d0a18d5e51285963abd72ce31c5df6901b4898a9a0bc5db60c8b7c258306
MD5 797195554e16bb3fce561128fe6a9272
SHA1 22fdb920c551e21b9c6190702362bb0dd1260d2a
SHA512 c75fa0d4c6fb41f05183cfc4cd581c6acc40c6dcddc2b8dd94727f4cc9cb4834c11c37b9db1405b2884b8bced4fdde3721dd653fcfcf1bfe0ccb938aadd04dce
SSDEEP 3072:GXS8LNS/O5g+rq46jwuUKr4sKDc6e5GJEi5s3afSZcpjRc9QsWaxjikyHTI1g1LC:uNLk/kUwuGDHDu/JBqI1K+dMxZnOJT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 350KB

file.exe

IMPHASH 8867379f72732d80f628d632331ec3f6
SHA256 d285d0a18d5e51285963abd72ce31c5df6901b4898a9a0bc5db60c8b7c258306
MD5 797195554e16bb3fce561128fe6a9272
SHA1 22fdb920c551e21b9c6190702362bb0dd1260d2a
SHA512 c75fa0d4c6fb41f05183cfc4cd581c6acc40c6dcddc2b8dd94727f4cc9cb4834c11c37b9db1405b2884b8bced4fdde3721dd653fcfcf1bfe0ccb938aadd04dce
SSDEEP 3072:GXS8LNS/O5g+rq46jwuUKr4sKDc6e5GJEi5s3afSZcpjRc9QsWaxjikyHTI1g1LC:uNLk/kUwuGDHDu/JBqI1K+dMxZnOJT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22115

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetFileAttributesExA GetGeoInfoW GlobalAlloc GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW HeapAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing