file[.]exe | Triage™

General

Target
file.exe
Size 350KB
Sample221024-ddal1aebdp
SHA256 f266c8ee6eb9d3bd5b6837f32f36db8a641e767ac894b81cec6c2dc3ee19f0dd
MD5 e10c6d5f4ac9ce8fac9853aae70336fc
SHA1 9f95cb1efaa84d6fcc484287de99ce967e228812
SHA512 1b61bf43a047fc2af34bb29df82f0b2860c62ae769f4d77878d45380be0238ab9174d720f9d1737a5436217d169b676539c0f1a317162601dcd79c7e77b06097
SSDEEP 6144:GrLZD4a13TDP0/x/zYhhdGMSvvT0tiXe9X0v/0Z:GrFD4atTC9UwMSwtiWE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 350KB

file.exe

IMPHASH 8867379f72732d80f628d632331ec3f6
SHA256 f266c8ee6eb9d3bd5b6837f32f36db8a641e767ac894b81cec6c2dc3ee19f0dd
MD5 e10c6d5f4ac9ce8fac9853aae70336fc
SHA1 9f95cb1efaa84d6fcc484287de99ce967e228812
SHA512 1b61bf43a047fc2af34bb29df82f0b2860c62ae769f4d77878d45380be0238ab9174d720f9d1737a5436217d169b676539c0f1a317162601dcd79c7e77b06097
SSDEEP 6144:GrLZD4a13TDP0/x/zYhhdGMSvvT0tiXe9X0v/0Z:GrFD4atTC9UwMSwtiWE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22115

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetFileAttributesExA GetGeoInfoW GlobalAlloc GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW HeapAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing