file[.]exe | Triage™

General

Target
file.exe
Size 219KB
Sample221023-qb3afsaedj
SHA256 caf87b3879751fdd42103df8eb8d9c91ac3ec4f2b9342d13ce3126227a3cce40
MD5 0fb0b61224935b1facb745de7b33f3ac
SHA1 eb7534e4474074c97146a1beb657d8e6a21f8817
SHA512 ea628f86253bba821ff11d4f4ec44426731adbaba4258d20f83bf89db67fb654c0ee8fbd8f7d45715ab0cdb4c644de1e251b2f1255d4dcafa04fd87e992028df
SSDEEP 3072:kXqALefyLiT+5+24Z0Ejpnhp8PMP56WI6v4:ghLe6WT/rdv8PmI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 219KB

file.exe

IMPHASH fde0517e64b0a7c2ff3801bc28f267be
SHA256 caf87b3879751fdd42103df8eb8d9c91ac3ec4f2b9342d13ce3126227a3cce40
MD5 0fb0b61224935b1facb745de7b33f3ac
SHA1 eb7534e4474074c97146a1beb657d8e6a21f8817
SHA512 ea628f86253bba821ff11d4f4ec44426731adbaba4258d20f83bf89db67fb654c0ee8fbd8f7d45715ab0cdb4c644de1e251b2f1255d4dcafa04fd87e992028df
SSDEEP 3072:kXqALefyLiT+5+24Z0Ejpnhp8PMP56WI6v4:ghLe6WT/rdv8PmI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21588

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing