file[.]exe | Triage™

General

Target
file.exe
Size 255KB
Sample221025-vknwmsdcfj
SHA256 b025a74d8e4ad0ca7afe3b83777f6d622caa36ac4fa9a98fdf39fd37f3d1332c
MD5 9dc258898bd682a20bcb6db5969a47c6
SHA1 1e7a28f0caedaf004a8f6883272f2f631438dc10
SHA512 252a2546515d6da5e8332a6e66cfe15888aa4a2dc64a756cced04eba1502b39c9e49b0b84b06baee62eaea40a8f6cc7ab5cab39b8f0534f01ccf3ecc690784da
SSDEEP 6144:QewPL69hPuPcbuoCzjZMtsz2A1nHsLlLwxo:QpG9hPuPcyoCzj6+z2AWLlQo
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 255KB

file.exe

IMPHASH 56b4a51e7e641459398108e837e8ebdd
SHA256 b025a74d8e4ad0ca7afe3b83777f6d622caa36ac4fa9a98fdf39fd37f3d1332c
MD5 9dc258898bd682a20bcb6db5969a47c6
SHA1 1e7a28f0caedaf004a8f6883272f2f631438dc10
SHA512 252a2546515d6da5e8332a6e66cfe15888aa4a2dc64a756cced04eba1502b39c9e49b0b84b06baee62eaea40a8f6cc7ab5cab39b8f0534f01ccf3ecc690784da
SSDEEP 6144:QewPL69hPuPcbuoCzjZMtsz2A1nHsLlLwxo:QpG9hPuPcyoCzj6+z2AWLlQo
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29855

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA FreeEnvironmentStringsA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW lstrlenW RaiseException LCMapStringA SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP IsValidCodePage CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing