file[.]exe | Triage™

General

Target
file.exe
Size 255KB
Sample221025-x132lsdee7
SHA256 88973873fa559e87935ef941f8999c9634efd0e5fc74fd3dd3c4dc92d4ee9a82
MD5 49b689311071c9e7a34aeec3da68fd90
SHA1 ed7b07badef27caa879a5842dac71565ed81e96b
SHA512 e27dce4e844a2a205f9bcfdf794127f044ea31b76dbc165e0abad701834f1c186a246072c12020be8f90791389b4aeadfc3da4571a4a7e447e62e07725388731
SSDEEP 3072:uPXVkHqaLUSF82XMBFcjR2Knq9AMvZ3yPdyJZmZJeNEZgZDqlIYUXO1Ny9k4k7Nl:S8vLZ1XMBFlKnKAMv1yFzJyjqlskTT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 255KB

file.exe

IMPHASH 2b8545f8efce1911c7297e81c579c60e
SHA256 88973873fa559e87935ef941f8999c9634efd0e5fc74fd3dd3c4dc92d4ee9a82
MD5 49b689311071c9e7a34aeec3da68fd90
SHA1 ed7b07badef27caa879a5842dac71565ed81e96b
SHA512 e27dce4e844a2a205f9bcfdf794127f044ea31b76dbc165e0abad701834f1c186a246072c12020be8f90791389b4aeadfc3da4571a4a7e447e62e07725388731
SSDEEP 3072:uPXVkHqaLUSF82XMBFcjR2Knq9AMvZ3yPdyJZmZJeNEZgZDqlIYUXO1Ny9k4k7Nl:S8vLZ1XMBFlKnKAMv1yFzJyjqlskTT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29839

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW RaiseException LCMapStringA SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP IsValidCodePage CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing