file[.]exe | Triage™

General

Target
file.exe
Size 350KB
Sample221023-j4earshcb9
SHA256 d6264f23108ab79fd253a5d8b95ef01d65b6f270e01d0aa7aef38fd394c08d68
MD5 da5cfed282713b54cf2633cbc43b8f85
SHA1 ec8087e4d7cd2d8971d8a68f6e0ebd33dec817b6
SHA512 f24b4bc274e8985a0505ca81333d77b500f7e022cc6271bd917bc853f7467e2c8b04f8461109742215cc0ed66c72cc8194937b2c39abc609c35e726ccacf2348
SSDEEP 6144:sNkLPUp1zRu+pCnqoeYxhR97JgKJnM1F7Ekdb6mPq7MXISb:sNkrUsrRpR9GKKDBdrXISb
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 350KB

file.exe

IMPHASH 558debac6b78af8061b33f9babb133a5
SHA256 d6264f23108ab79fd253a5d8b95ef01d65b6f270e01d0aa7aef38fd394c08d68
MD5 da5cfed282713b54cf2633cbc43b8f85
SHA1 ec8087e4d7cd2d8971d8a68f6e0ebd33dec817b6
SHA512 f24b4bc274e8985a0505ca81333d77b500f7e022cc6271bd917bc853f7467e2c8b04f8461109742215cc0ed66c72cc8194937b2c39abc609c35e726ccacf2348
SSDEEP 6144:sNkLPUp1zRu+pCnqoeYxhR97JgKJnM1F7Ekdb6mPq7MXISb:sNkrUsrRpR9GKKDBdrXISb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21460

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing