file[.]exe | Triage™

General

Target
file.exe
Size 328KB
Sample221023-n71qdsabd2
SHA256 edbfb8ea9975e2d0288570f4d7b575ed9b30735d66409c221232e908bad40b98
MD5 776c40e53a7394547983a497adc68b7a
SHA1 2e26a1a87965b83c41329abb054ca869494ace0f
SHA512 254d456b3726afa326f0dde7e16d15c15f155f5ecf30b5492855b98b9b25fefd494ebb9e1f8b70eb34ba12892a504c3fbbd14ea618cbd5d4521e1fa4201f9cdf
SSDEEP 6144:VATLep1e/ZGwwaHdpw7aTVv7c7D4lVyKG4GXwjZVLl:+Tip4/ZGXqdpw7aTVv7c7D4ZGTaDl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 328KB

file.exe

IMPHASH fde0517e64b0a7c2ff3801bc28f267be
SHA256 edbfb8ea9975e2d0288570f4d7b575ed9b30735d66409c221232e908bad40b98
MD5 776c40e53a7394547983a497adc68b7a
SHA1 2e26a1a87965b83c41329abb054ca869494ace0f
SHA512 254d456b3726afa326f0dde7e16d15c15f155f5ecf30b5492855b98b9b25fefd494ebb9e1f8b70eb34ba12892a504c3fbbd14ea618cbd5d4521e1fa4201f9cdf
SSDEEP 6144:VATLep1e/ZGwwaHdpw7aTVv7c7D4lVyKG4GXwjZVLl:+Tip4/ZGXqdpw7aTVv7c7D4ZGTaDl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21572

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing