file[.]exe | Triage™

General

Target
file.exe
Size 224KB
Sample221023-aq69ysffbp
SHA256 57f45a71581be8db1677109dc507d8421632e9bd0f8ecbf22b73ada97aeecd84
MD5 5904fc1c9ecfc145e86303dee2e17877
SHA1 b464455c61e2d6bb3c5834bd636536bad298f749
SHA512 e4a3695c574d7d54f304ec7d3f4bbb23658892626cab56ef969f4b5e20f83d9ffdb7f52d62f2057328467e0f7ab7aa71369a539401e022ead8c8162102967b05
SSDEEP 3072:vXGgeLHJsqSvUZ5FvfvJtsJ8kEtJjibEmrjY+z1jMhs0:fxeL2qKUZvXJ68k4JjsEwz6K0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH a4f2eb6f530f70bf0bd87392bfbcd7f1
SHA256 57f45a71581be8db1677109dc507d8421632e9bd0f8ecbf22b73ada97aeecd84
MD5 5904fc1c9ecfc145e86303dee2e17877
SHA1 b464455c61e2d6bb3c5834bd636536bad298f749
SHA512 e4a3695c574d7d54f304ec7d3f4bbb23658892626cab56ef969f4b5e20f83d9ffdb7f52d62f2057328467e0f7ab7aa71369a539401e022ead8c8162102967b05
SSDEEP 3072:vXGgeLHJsqSvUZ5FvfvJtsJ8kEtJjibEmrjY+z1jMhs0:fxeL2qKUZvXJ68k4JjsEwz6K0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21217

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP CreateFileA

Sharing