file[.]exe | Triage™

General

Target
file.exe
Size 364KB
Sample221026-a879zaece2
SHA256 a6091a5db0adf12e6879ce846f5b2a8bf5ff2d0b23e1727d3a811f34e55b8d4c
MD5 0e515f98eb7936a6f33c61d9b161a2d7
SHA1 355092c7b84c5cf11c68b1e5a0fae794798b7be5
SHA512 a7f00505cb834df89ba0b2a28becebdfcd8ac77a91ccda0dbe4b9c3cada102a578e951db50b6f5e1b3fce46ce680856e7dd12b7ed12c48564e9576001358a41b
SSDEEP 6144:7GxLFBvMOT6gCTmZ6her5oldCY0a2Ev1sIm5gZteIP+VCQEmxN:7URBvMOTeTm4hW5olYLAYqKTs2N
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 364KB

file.exe

IMPHASH 2b8545f8efce1911c7297e81c579c60e
SHA256 a6091a5db0adf12e6879ce846f5b2a8bf5ff2d0b23e1727d3a811f34e55b8d4c
MD5 0e515f98eb7936a6f33c61d9b161a2d7
SHA1 355092c7b84c5cf11c68b1e5a0fae794798b7be5
SHA512 a7f00505cb834df89ba0b2a28becebdfcd8ac77a91ccda0dbe4b9c3cada102a578e951db50b6f5e1b3fce46ce680856e7dd12b7ed12c48564e9576001358a41b
SSDEEP 6144:7GxLFBvMOT6gCTmZ6her5oldCY0a2Ev1sIm5gZteIP+VCQEmxN:7URBvMOTeTm4hW5olYLAYqKTs2N
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29823

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW RaiseException LCMapStringA SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP IsValidCodePage CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing