file[.]exe | Triage™

General

Target
file.exe
Size 386KB
Sample221026-apf2daecb6
SHA256 b222b4a41de6a1865f8cc919f7e18d16d91f36d2c27c3a4ef115da3b2c0f0516
MD5 c2dc577c34382a095f5086276d98f1c4
SHA1 5a73d1ca669f19a5c2e7b0cc8d1c8d966f25dd8b
SHA512 5c6976e0a1c0486f1bb76da3bc2fe00603b0a3f8afdba26ca90313ccd79147404127c840c8f690298cc343cd7a7ba10b8d2313eea718fb4ba1156befd74f829e
SSDEEP 6144:ztKLtLQABTtvscrHNQcSAsYGc4NyJJm7RNHuNyH3Ho1izW:zIRLQABTacrHNQcSpJfka6IXHor
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 386KB

file.exe

IMPHASH 2b8545f8efce1911c7297e81c579c60e
SHA256 b222b4a41de6a1865f8cc919f7e18d16d91f36d2c27c3a4ef115da3b2c0f0516
MD5 c2dc577c34382a095f5086276d98f1c4
SHA1 5a73d1ca669f19a5c2e7b0cc8d1c8d966f25dd8b
SHA512 5c6976e0a1c0486f1bb76da3bc2fe00603b0a3f8afdba26ca90313ccd79147404127c840c8f690298cc343cd7a7ba10b8d2313eea718fb4ba1156befd74f829e
SSDEEP 6144:ztKLtLQABTtvscrHNQcSAsYGc4NyJJm7RNHuNyH3Ho1izW:zIRLQABTacrHNQcSpJfka6IXHor
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29823

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW RaiseException LCMapStringA SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP IsValidCodePage CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing