file[.]exe | Triage™

General

Target
file.exe
Size 353KB
Sample221025-mhntvscch8
SHA256 8ac158fb6e0c8502387f5fc4b8103fb500b5d5cc6fbbfdb5a14f4a65ca3f38fa
MD5 40c0577dda7e602e7560b7f8e4f7bc9e
SHA1 0bf0166c51625b001129c1cd9a15439d4f7f73cd
SHA512 504e4e4595964fe3e14096131941b7c6501903f0a77502120145cdea2cf6ad781f51f27d556fe65da76a6133f8935e47bc6dcfad1b0add7a0c842b76ae270bc4
SSDEEP 6144:bRyXLIf7e/L8BF3fdLn4E+I3+z+TNj3ROjgtDh8lsLOIY6:bRgsf7+8BFJTNj3AjgR22N
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 353KB

file.exe

IMPHASH d469ca1d6e996368501cdcdaad61b8dc
SHA256 8ac158fb6e0c8502387f5fc4b8103fb500b5d5cc6fbbfdb5a14f4a65ca3f38fa
MD5 40c0577dda7e602e7560b7f8e4f7bc9e
SHA1 0bf0166c51625b001129c1cd9a15439d4f7f73cd
SHA512 504e4e4595964fe3e14096131941b7c6501903f0a77502120145cdea2cf6ad781f51f27d556fe65da76a6133f8935e47bc6dcfad1b0add7a0c842b76ae270bc4
SSDEEP 6144:bRyXLIf7e/L8BF3fdLn4E+I3+z+TNj3ROjgtDh8lsLOIY6:bRgsf7+8BFJTNj3AjgR22N
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27519

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW SetEndOfFile LoadResource InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetGeoInfoW GetConsoleAliasExesW GlobalAlloc GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc LoadLibraryA LocalAlloc AddAtomA FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW SetFileShortNameA TerminateJobObject LCMapStringW GetStartupInfoW HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle GetCPInfo GetACP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers GetProcessHeap MultiByteToWideChar ReadFile GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize

Sharing