file[.]exe | Triage™

General

Target
file.exe
Size 219KB
Sample221023-m99kmshhf7
SHA256 8067e6b032254ed41efcebee0cb0ccaee2336f185b0bef1e2c73acb3b465ff20
MD5 6cbacfe0abf71393b2866c0b8fa06526
SHA1 e4fec1d6f5c4d6014daee61c0c618afea7f5c480
SHA512 00ad791e208df4d5b89b1ba6a6acb8d6cca252905e048fa38bc9e70813c004bbbd3b614f98277906522237d8feb3c7963226c8842412b2aa6b5bb57e20dd2063
SSDEEP 3072:DXCHZL3Md/BB5VDMIic4FZIv+XlrxV+A7CgYETES:7uZLcd/BFic4oEV+A3p
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 219KB

file.exe

IMPHASH fde0517e64b0a7c2ff3801bc28f267be
SHA256 8067e6b032254ed41efcebee0cb0ccaee2336f185b0bef1e2c73acb3b465ff20
MD5 6cbacfe0abf71393b2866c0b8fa06526
SHA1 e4fec1d6f5c4d6014daee61c0c618afea7f5c480
SHA512 00ad791e208df4d5b89b1ba6a6acb8d6cca252905e048fa38bc9e70813c004bbbd3b614f98277906522237d8feb3c7963226c8842412b2aa6b5bb57e20dd2063
SSDEEP 3072:DXCHZL3Md/BB5VDMIic4FZIv+XlrxV+A7CgYETES:7uZLcd/BFic4oEV+A3p
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21572

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing