file[.]exe | Triage™

General

Target
file.exe
Size 256KB
Sample221025-txhdysdbf4
SHA256 eef3daf1a78cce9eb07b6a623cbc32cf6b0e78294c2af33d63b6d52ffa92954e
MD5 9f5c12ac7335d4cc33b1c0bf24e8bdd7
SHA1 e95bc7fc064b1a45930e0bf454c52df8beb3f746
SHA512 165f9ac45558094354c276fd81ecdb2df670667959d075f131c58cab5a3c3cc15a49adcfcd9d6c53937f90016916fca4432cc42f2cc10501232951d41896f226
SSDEEP 3072:bXVp0w9QIL5SYVBv/DY78ERWM2SR/d3MByiAgl7baC3lvYHnqZcI1MohSpTo:zDbvLD3v/DY78LM2A/hMdl7Z3R0neT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 256KB

file.exe

IMPHASH 56b4a51e7e641459398108e837e8ebdd
SHA256 eef3daf1a78cce9eb07b6a623cbc32cf6b0e78294c2af33d63b6d52ffa92954e
MD5 9f5c12ac7335d4cc33b1c0bf24e8bdd7
SHA1 e95bc7fc064b1a45930e0bf454c52df8beb3f746
SHA512 165f9ac45558094354c276fd81ecdb2df670667959d075f131c58cab5a3c3cc15a49adcfcd9d6c53937f90016916fca4432cc42f2cc10501232951d41896f226
SSDEEP 3072:bXVp0w9QIL5SYVBv/DY78ERWM2SR/d3MByiAgl7baC3lvYHnqZcI1MohSpTo:zDbvLD3v/DY78LM2A/hMdl7Z3R0neT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA FreeEnvironmentStringsA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW lstrlenW RaiseException LCMapStringA SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP IsValidCodePage CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing