file[.]exe | Triage™

General

Target
file.exe
Size 254KB
Sample221025-yn8xrsdfd4
SHA256 2597561772512240ab55e9d960c9560415fb5ac8a119b31b48a0a00bad65ad61
MD5 a92da01e20e8d24d43eee1b3332214e9
SHA1 8d7bd83bdbf8eb8cb6b8067cf3260f499d8e1710
SHA512 d5592ff6e1f542823368f1f9689846f730bdc5852b5d1c2b1aa5930f87400b732bba26813db1928b4ab1d7d5770175f22e61ea7367b80206c47ca6f59724efd4
SSDEEP 6144:RYhLepXHTlyG6vVHEk3THfFyOgRAZKJf:RmipXHTlGZ3xoV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 254KB

file.exe

IMPHASH 2b8545f8efce1911c7297e81c579c60e
SHA256 2597561772512240ab55e9d960c9560415fb5ac8a119b31b48a0a00bad65ad61
MD5 a92da01e20e8d24d43eee1b3332214e9
SHA1 8d7bd83bdbf8eb8cb6b8067cf3260f499d8e1710
SHA512 d5592ff6e1f542823368f1f9689846f730bdc5852b5d1c2b1aa5930f87400b732bba26813db1928b4ab1d7d5770175f22e61ea7367b80206c47ca6f59724efd4
SSDEEP 6144:RYhLepXHTlyG6vVHEk3THfFyOgRAZKJf:RmipXHTlGZ3xoV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29823

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW RaiseException LCMapStringA SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP IsValidCodePage CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing