file[.]exe | Triage™

General

Target
file.exe
Size 255KB
Sample221025-ssftwsdaf2
SHA256 ee80f7cd287a59f642c511f0d843b5dfa6b0b9ee8cdb6cf5506c53b9fa4c384a
MD5 0d64fa9b8ff4cd0028d28446c52b0832
SHA1 ab533ec85cfd94cb289b07bb80824253d5486915
SHA512 b1b8e3560898946e005505e879e8ae1f34019c95f45535386c2311a39606b887e5e0db60a62ce584c117cc0e280752d42587474738ce7753ee29f58b127ba975
SSDEEP 3072:vXVHPzF8L3SSKTBP24WCRqMo31ZyqWip9C0aU0v0VjUQ5ZtARAibKvMs:f1eLLqBP24W151FW000L0sxtARdKv9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 255KB

file.exe

IMPHASH 2b87cff21007042d6c5aa92a04e7e914
SHA256 ee80f7cd287a59f642c511f0d843b5dfa6b0b9ee8cdb6cf5506c53b9fa4c384a
MD5 0d64fa9b8ff4cd0028d28446c52b0832
SHA1 ab533ec85cfd94cb289b07bb80824253d5486915
SHA512 b1b8e3560898946e005505e879e8ae1f34019c95f45535386c2311a39606b887e5e0db60a62ce584c117cc0e280752d42587474738ce7753ee29f58b127ba975
SSDEEP 3072:vXVHPzF8L3SSKTBP24WCRqMo31ZyqWip9C0aU0v0VjUQ5ZtARAibKvMs:f1eLLqBP24W151FW000L0sxtARdKv9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29807

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW lstrlenW RaiseException LCMapStringA SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW SetFileShortNameA TerminateJobObject LCMapStringW GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP IsValidCodePage CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing