file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221025-ewc1hsbef4
SHA256 00b043b01844a78e51e3cdf5bb2b789e0eab9ff63e2cffbff8f3cf38ab099989
MD5 b23d377a460657f8d7a553499678f36a
SHA1 34da18ca86ee206dd9178bd6c66d5eca7a8e80a8
SHA512 28888a061f0d5d8afea392530025c6f4283b14a855e48e7c0a0c02ba898e481b3c3987531047dd54d624289ac248be1572b8a10626c2fae91dee03c0c04a3f4f
SSDEEP 3072:xXIOQLW5EgrY5tEQfDhxQludVHFBUdE4xd6KTWZKKlB0Xp36rasFVV9hdl:VTQLCRrcEQNWluhFB6r6muSzMVbdl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 2298a85f6209121c0300386104921291
SHA256 00b043b01844a78e51e3cdf5bb2b789e0eab9ff63e2cffbff8f3cf38ab099989
MD5 b23d377a460657f8d7a553499678f36a
SHA1 34da18ca86ee206dd9178bd6c66d5eca7a8e80a8
SHA512 28888a061f0d5d8afea392530025c6f4283b14a855e48e7c0a0c02ba898e481b3c3987531047dd54d624289ac248be1572b8a10626c2fae91dee03c0c04a3f4f
SSDEEP 3072:xXIOQLW5EgrY5tEQfDhxQludVHFBUdE4xd6KTWZKKlB0Xp36rasFVV9hdl:VTQLCRrcEQNWluhFB6r6muSzMVbdl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24259

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetGeoInfoW GlobalAlloc GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage LoadLibraryA LocalAlloc AddAtomA FoldStringA FindNextFileA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW HeapAlloc GetLastError HeapFree SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing