file[.]exe | Triage™

General

Target
file.exe
Size 217KB
Sample221023-kr54dshdb9
SHA256 5356dfc8d72b534ffb3897042cccf3d4b30a74fe89252da8f8ac96c7e3593fb0
MD5 ae6802727d84ab0192d420a2392d48eb
SHA1 f79b9e59deaa9046ae776cfcb3ae18ddd52c1805
SHA512 9df9eb0799a6bf2897557b225bef1292bcde64922bc40cced4de1fafc51e14d49e62412b9764e08c88e69f18640783a973d19271c84fb371443cfacecfd19e0e
SSDEEP 3072:yXluwL0kqD5yHHqFuJ3uGg0/b8/wA9fnnkFdSBzAnzRj:yowLLqQqFuJ3yT9fnkFdSBEnV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 217KB

file.exe

IMPHASH 558debac6b78af8061b33f9babb133a5
SHA256 5356dfc8d72b534ffb3897042cccf3d4b30a74fe89252da8f8ac96c7e3593fb0
MD5 ae6802727d84ab0192d420a2392d48eb
SHA1 f79b9e59deaa9046ae776cfcb3ae18ddd52c1805
SHA512 9df9eb0799a6bf2897557b225bef1292bcde64922bc40cced4de1fafc51e14d49e62412b9764e08c88e69f18640783a973d19271c84fb371443cfacecfd19e0e
SSDEEP 3072:yXluwL0kqD5yHHqFuJ3uGg0/b8/wA9fnnkFdSBzAnzRj:yowLLqQqFuJ3yT9fnkFdSBEnV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21460

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing