file[.]exe | Triage™

General

Target
file.exe
Size 349KB
Sample221023-vj4kpsbdc3
SHA256 f5da3aea3fa5167083f6888395bd73101981b456902bc36d8e1a5d769b87af89
MD5 f8fa6528df48b3fdee68aa86160649aa
SHA1 446c617a0e18aa3f21c493a8c08cf114080fa2b3
SHA512 969c7631d33d1aaf90a3fdaecfbc30199aeba1ddd37706b6ae15c01b460a01fdd8d671ad75418c56bf5ed642202eae422f52da11a147d51050a7a441b171e325
SSDEEP 6144:yCLoDfDjFDwzmkkgFdf5lx/KqFNmCCGaRQvKjb/J6voPUmM3XA21hCOS18kU:yCsDLtFkXlt/GGtSj7JrMnV1o
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 349KB

file.exe

IMPHASH d03478a6c3c407f77f1436449d58c5a8
SHA256 f5da3aea3fa5167083f6888395bd73101981b456902bc36d8e1a5d769b87af89
MD5 f8fa6528df48b3fdee68aa86160649aa
SHA1 446c617a0e18aa3f21c493a8c08cf114080fa2b3
SHA512 969c7631d33d1aaf90a3fdaecfbc30199aeba1ddd37706b6ae15c01b460a01fdd8d671ad75418c56bf5ed642202eae422f52da11a147d51050a7a441b171e325
SSDEEP 6144:yCLoDfDjFDwzmkkgFdf5lx/KqFNmCCGaRQvKjb/J6voPUmM3XA21hCOS18kU:yCsDLtFkXlt/GGtSj7JrMnV1o
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21620

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing