file[.]exe | Triage™

General

Target
file.exe
Size 350KB
Sample221023-qaccmsaebq
SHA256 2e538d9cd939da5ad0dc52874b631e9fe4557018cfad024bce1e85b8ee3d91f3
MD5 50289538615b6020bc54e553a5d5ae16
SHA1 3f2148d7ddd7ae0d26b2f1a1f125bfd692729d0e
SHA512 d3d4cf0d11e54cd9b0a435bead242c156cf2c6a08bea84abeda6d55dce1cd712bf5d59dd7955c13d90405e296329f076f5d8b3ea9e3c3b16a4140605cde8ab2f
SSDEEP 6144:tiL/A7GfJd7joTMszUcob2ipyxPEIOdgIz/hh4fF9ffaxIKN:ti7AK/7joYsBc21x8IOiIzPCfG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 350KB

file.exe

IMPHASH fde0517e64b0a7c2ff3801bc28f267be
SHA256 2e538d9cd939da5ad0dc52874b631e9fe4557018cfad024bce1e85b8ee3d91f3
MD5 50289538615b6020bc54e553a5d5ae16
SHA1 3f2148d7ddd7ae0d26b2f1a1f125bfd692729d0e
SHA512 d3d4cf0d11e54cd9b0a435bead242c156cf2c6a08bea84abeda6d55dce1cd712bf5d59dd7955c13d90405e296329f076f5d8b3ea9e3c3b16a4140605cde8ab2f
SSDEEP 6144:tiL/A7GfJd7joTMszUcob2ipyxPEIOdgIz/hh4fF9ffaxIKN:ti7AK/7joYsBc21x8IOiIzPCfG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21572

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing