file[.]exe | Triage™

General

Target
file.exe
Size 374KB
Sample221025-mesnmsccfl
SHA256 1b1290ed02b74182f7895c6809048627ff3cfd9b50bf0c250f2a59956a568468
MD5 c5b52060359c00c4bd3ff4f0ed164c77
SHA1 af0c495a29e73d8c5409f2f05a6bd409e3e5b034
SHA512 bc485a051edae57d68c6f5bfb6cb7b9414f6fde9e79f360962b4d318021055ae93b248a3744a0ff8489422ab3d7a1c65654e6eb0a8f50e462b79b936a823ff6a
SSDEEP 6144:WaOMLmrhezen2QG69ZFv8yNDvSfE3VewqogxR/Pw9Mej80nP:Wa3yrh+BQhFvBPYwba/YSI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 374KB

file.exe

IMPHASH d469ca1d6e996368501cdcdaad61b8dc
SHA256 1b1290ed02b74182f7895c6809048627ff3cfd9b50bf0c250f2a59956a568468
MD5 c5b52060359c00c4bd3ff4f0ed164c77
SHA1 af0c495a29e73d8c5409f2f05a6bd409e3e5b034
SHA512 bc485a051edae57d68c6f5bfb6cb7b9414f6fde9e79f360962b4d318021055ae93b248a3744a0ff8489422ab3d7a1c65654e6eb0a8f50e462b79b936a823ff6a
SSDEEP 6144:WaOMLmrhezen2QG69ZFv8yNDvSfE3VewqogxR/Pw9Mej80nP:Wa3yrh+BQhFvBPYwba/YSI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27519

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW SetEndOfFile LoadResource InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetGeoInfoW GetConsoleAliasExesW GlobalAlloc GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc LoadLibraryA LocalAlloc AddAtomA FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle GetCPInfo GetACP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers GetProcessHeap MultiByteToWideChar ReadFile GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize

Sharing