file[.]exe | Triage™

General

Target
file.exe
Size 218KB
Sample221023-nnad4aaad2
SHA256 3a42eb4aae92d7849cd6cae939f9c1030fe66e8d86c291ffe2445b2ee03cd108
MD5 6810df46b66941f9677b8821b957b52b
SHA1 5f8e9502508995f2b96cebf746c0ff50c8f9412b
SHA512 22262fb90064db7e60cfbadc9d165c5337e1fd7397dde4c6609fb4ee688f51d8efef5c1b37e209a6d627e4ece571737eee97a7ac46f97e95716c7991d421eb5c
SSDEEP 3072:6XVQvLzC+VWB5xI/fOweKdj/OGixYk50mCIllFaDYVR5i6:aavLu+VWS/fOweijWGiDyvIllFasVLN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 218KB

file.exe

IMPHASH fde0517e64b0a7c2ff3801bc28f267be
SHA256 3a42eb4aae92d7849cd6cae939f9c1030fe66e8d86c291ffe2445b2ee03cd108
MD5 6810df46b66941f9677b8821b957b52b
SHA1 5f8e9502508995f2b96cebf746c0ff50c8f9412b
SHA512 22262fb90064db7e60cfbadc9d165c5337e1fd7397dde4c6609fb4ee688f51d8efef5c1b37e209a6d627e4ece571737eee97a7ac46f97e95716c7991d421eb5c
SSDEEP 3072:6XVQvLzC+VWB5xI/fOweKdj/OGixYk50mCIllFaDYVR5i6:aavLu+VWS/fOweijWGiDyvIllFasVLN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21572

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing