file[.]exe | Triage™

General

Target
file.exe
Size 375KB
Sample221025-prs62scgam
SHA256 2ca8638b31cb420f3c021ab4803f4cee8eee38117d68b7561bf82cd8ff0b52c4
MD5 416225bb7b03531ccb5f2dd7df89df38
SHA1 9f18c4389ec4844ddc4279e85e6b18c8f0e626da
SHA512 f8dc93a164f230eebd6e8f07c85db40ce2d6baa0b21425cb238f191567a8c5fabaef42c039ea831af2ef944c3b903c756f70fb8ea429d723a757ff0b95b74f77
SSDEEP 6144:y6ZhLn2931ThgrnoWeuahXCtl7gHF74UV6wdY2Q0Gu86or:y6Xb293anZtaCfcyUVPdYgE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 375KB

file.exe

IMPHASH 73d6a4e69d211c2dabc88d784f81dd52
SHA256 2ca8638b31cb420f3c021ab4803f4cee8eee38117d68b7561bf82cd8ff0b52c4
MD5 416225bb7b03531ccb5f2dd7df89df38
SHA1 9f18c4389ec4844ddc4279e85e6b18c8f0e626da
SHA512 f8dc93a164f230eebd6e8f07c85db40ce2d6baa0b21425cb238f191567a8c5fabaef42c039ea831af2ef944c3b903c756f70fb8ea429d723a757ff0b95b74f77
SSDEEP 6144:y6ZhLn2931ThgrnoWeuahXCtl7gHF74UV6wdY2Q0Gu86or:y6Xb293anZtaCfcyUVPdYgE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28383

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW lstrlenW RaiseException LCMapStringA SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW SetFileShortNameA TerminateJobObject LCMapStringW GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc CreateFileA SetStdHandle GetCPInfo GetACP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetLocaleInfoA GetProcessHeap MultiByteToWideChar ReadFile GetStringTypeA GetStringTypeW GetConsoleOutputCP WriteConsoleW

Sharing