file[.]exe | Triage™

General

Target
file.exe
Size 333KB
Sample221023-fe4ycagegm
SHA256 025b335f1ba0c219d4ceff2d1cd392af1eebe6c7ee00c0a27f5ee7486d1b7dcc
MD5 de85c72763f84e9d3122290bff456cb0
SHA1 d1d204295680b04792f42c88a49e4cbe1d76126e
SHA512 e0713b84b8e2897f06c550da96d42f85849f80dd4ee2037b0ad724d24b01c8b1cfbc0ab83c8d8ad6cea5a60c110ab20ae5336faf88d7483b07b021a1c5fd9739
SSDEEP 6144:fOPLYS8C8IJgNSxHM4PhjGBifJxdypE9MQRKRg:fOPcS8C8IJNqkHjeQRK+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 333KB

file.exe

IMPHASH a4f2eb6f530f70bf0bd87392bfbcd7f1
SHA256 025b335f1ba0c219d4ceff2d1cd392af1eebe6c7ee00c0a27f5ee7486d1b7dcc
MD5 de85c72763f84e9d3122290bff456cb0
SHA1 d1d204295680b04792f42c88a49e4cbe1d76126e
SHA512 e0713b84b8e2897f06c550da96d42f85849f80dd4ee2037b0ad724d24b01c8b1cfbc0ab83c8d8ad6cea5a60c110ab20ae5336faf88d7483b07b021a1c5fd9739
SSDEEP 6144:fOPLYS8C8IJgNSxHM4PhjGBifJxdypE9MQRKRg:fOPcS8C8IJNqkHjeQRK+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21217

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP CreateFileA

Sharing