file[.]exe | Triage™

General

Target
file.exe
Size 333KB
Sample221023-bds28sffgm
SHA256 f06c94090fd5acb21d95d1f576e40991aa6abc8d1ea2f085ab0c08cfde5050eb
MD5 80228a4070074c86e593067de1279951
SHA1 52a8073dbb179a5842896c60ea179c0a8db7bbeb
SHA512 9451f3332b4fcdfa174a5ea80b4936047fb459a1f9c9ce9804ccc8b64ea4e92b369c5b24555906da81c2a23bdb02d3848163f796ffcd907bd7a173c23b621711
SSDEEP 6144:OwgLY2yCuyUj34iOpH7C6DpnAXOHS2VnFU4rF:Owgs2yCuPz4iCbZxVFU4F
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 333KB

file.exe

IMPHASH a4f2eb6f530f70bf0bd87392bfbcd7f1
SHA256 f06c94090fd5acb21d95d1f576e40991aa6abc8d1ea2f085ab0c08cfde5050eb
MD5 80228a4070074c86e593067de1279951
SHA1 52a8073dbb179a5842896c60ea179c0a8db7bbeb
SHA512 9451f3332b4fcdfa174a5ea80b4936047fb459a1f9c9ce9804ccc8b64ea4e92b369c5b24555906da81c2a23bdb02d3848163f796ffcd907bd7a173c23b621711
SSDEEP 6144:OwgLY2yCuyUj34iOpH7C6DpnAXOHS2VnFU4rF:Owgs2yCuPz4iCbZxVFU4F
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21217

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP CreateFileA

Sharing