file[.]exe | Triage™

General

Target
file.exe
Size 218KB
Sample221023-taf8dabbfp
SHA256 45395d22934f8b3e834960eccbc9f8a1f04a9f4269fda0f79dc7a868b8853603
MD5 52925359f2684ffdf954d2f7f2024f78
SHA1 eb017e232d77bdeede0c397ea089ab7c07c77003
SHA512 6190665e87c0b9503e501791b1c00d8fcc0926bc6da92f20e026b54bfeb347cb424c67b4ffb45e1c0bef1b3cb13347a5a774d41ec780deda864fadf6ea01def9
SSDEEP 3072:LXD9L0wMT4lB5b9NKo+dxlc2a3Dgcxw4BC58f8QaHpSlfE:jZLET4lH907lVsxxdo6S4S
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 218KB

file.exe

IMPHASH fde0517e64b0a7c2ff3801bc28f267be
SHA256 45395d22934f8b3e834960eccbc9f8a1f04a9f4269fda0f79dc7a868b8853603
MD5 52925359f2684ffdf954d2f7f2024f78
SHA1 eb017e232d77bdeede0c397ea089ab7c07c77003
SHA512 6190665e87c0b9503e501791b1c00d8fcc0926bc6da92f20e026b54bfeb347cb424c67b4ffb45e1c0bef1b3cb13347a5a774d41ec780deda864fadf6ea01def9
SSDEEP 3072:LXD9L0wMT4lB5b9NKo+dxlc2a3Dgcxw4BC58f8QaHpSlfE:jZLET4lH907lVsxxdo6S4S
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21572

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing