file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample221023-arrkwsfea2
SHA256 0899a1ec4a67a7be34c159d3b63335a9f023259a0471607b1dd4cca2a4397f0e
MD5 73fc4b35b797c6efd4a49b0799af717a
SHA1 9b23937dde64fe1586637ed027d2f661e0d6dc24
SHA512 4ce7a03e14467e3bbf60144cd23aeb0efe07ba6f87d2b79758a391dec2dda726e388d50da6e0ce14ec466127e8d2053b35b03d6e3cf9705de12794c0ddb1dbb1
SSDEEP 3072:LXGITLBQ9I6roZ5AlpE1QINQihMgHQsORagRjzx56Tx+AJsUnd6YKKbzm:jBTLAI2o0o1QINXat95AjJsm4Kby
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH a4f2eb6f530f70bf0bd87392bfbcd7f1
SHA256 0899a1ec4a67a7be34c159d3b63335a9f023259a0471607b1dd4cca2a4397f0e
MD5 73fc4b35b797c6efd4a49b0799af717a
SHA1 9b23937dde64fe1586637ed027d2f661e0d6dc24
SHA512 4ce7a03e14467e3bbf60144cd23aeb0efe07ba6f87d2b79758a391dec2dda726e388d50da6e0ce14ec466127e8d2053b35b03d6e3cf9705de12794c0ddb1dbb1
SSDEEP 3072:LXGITLBQ9I6roZ5AlpE1QINQihMgHQsORagRjzx56Tx+AJsUnd6YKKbzm:jBTLAI2o0o1QINXat95AjJsm4Kby
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21217

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP CreateFileA

Sharing