file[.]exe | Triage™

General

Target
file.exe
Size 219KB
Sample221023-qaccmsadc4
SHA256 976b8aa45fff71d41d671bd0fb1d2eff26eba532f430dba6ddaec64a461dee77
MD5 391686afce0eaab9ba9a5251f197a20b
SHA1 57146b9e4a766d96cb16af370f0437940151c139
SHA512 75cd3b1dff439365485a973d7e91b3c50bbbde5d155e0058f520d7153f0e508cf1813dd1299ac4982b5fd37e8716bc1cfeddb81b4a104e9b4da91e899b67f8ec
SSDEEP 3072:MXhKmQL+sWfMB5jfBpH7bYDb17KdNYAnZEDHAq/Qye69:ImLjWfM3TH7bYDBmXzn/qd9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 219KB

file.exe

IMPHASH fde0517e64b0a7c2ff3801bc28f267be
SHA256 976b8aa45fff71d41d671bd0fb1d2eff26eba532f430dba6ddaec64a461dee77
MD5 391686afce0eaab9ba9a5251f197a20b
SHA1 57146b9e4a766d96cb16af370f0437940151c139
SHA512 75cd3b1dff439365485a973d7e91b3c50bbbde5d155e0058f520d7153f0e508cf1813dd1299ac4982b5fd37e8716bc1cfeddb81b4a104e9b4da91e899b67f8ec
SSDEEP 3072:MXhKmQL+sWfMB5jfBpH7bYDb17KdNYAnZEDHAq/Qye69:ImLjWfM3TH7bYDBmXzn/qd9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21572

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing