file[.]exe | Triage™

General

Target
file.exe
Size 219KB
Sample221024-ay2z7sdfbp
SHA256 7e1a64ad7c58ef85190412d644da84f66edbfeaf97161bf3076dc76675d643f6
MD5 00dfa0a544532d1105878ebc3a503396
SHA1 0113d8c068d647a6acc3742eec2f4acb113cd316
SHA512 0fd2449566f7720c517a1bad5085a9367a341a87b0afa4562329cde60b8dd3a60f48d19715fee7d445fc8ec83aff0434b54e2eb7595d255065bf6e60549ea490
SSDEEP 3072:AXWuLKlKMO5bQeFNWaWdxHM4QUoanPXjWyOJ:0DLrMRKNWaWjHg1av6fJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 219KB

file.exe

IMPHASH 8867379f72732d80f628d632331ec3f6
SHA256 7e1a64ad7c58ef85190412d644da84f66edbfeaf97161bf3076dc76675d643f6
MD5 00dfa0a544532d1105878ebc3a503396
SHA1 0113d8c068d647a6acc3742eec2f4acb113cd316
SHA512 0fd2449566f7720c517a1bad5085a9367a341a87b0afa4562329cde60b8dd3a60f48d19715fee7d445fc8ec83aff0434b54e2eb7595d255065bf6e60549ea490
SSDEEP 3072:AXWuLKlKMO5bQeFNWaWdxHM4QUoanPXjWyOJ:0DLrMRKNWaWjHg1av6fJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22115

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetFileAttributesExA GetGeoInfoW GlobalAlloc GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW HeapAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing