file[.]exe | Triage™

General

Target
file.exe
Size 386KB
Sample221026-c2fbqaeehj
SHA256 006b1f025e75c853f3e776dd579791d6ac479bc25a6f0bbec92af86a149dffd8
MD5 116c0e8343a4bd13c60bc0982664ceb6
SHA1 85fd3e2e9a30a3ff0e2ae416ae86decbd43b0f48
SHA512 cf8ffa44bca15adabbefd217f451ba9c99fd6c8baa8291928394bbdd716f007915217c1cd6d85b714b25ced1ca2df4f31693d30bd1022fbf46d5fb142dd24a3d
SSDEEP 6144:5XI5XL/kxUU+x6NmM2rfATVyYM1MbYA4uGe55/eeTt4iqB/7fBjmSWFy:5X0LkxUU+cF4fATtMoFeeeiqBbCy
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 386KB

file.exe

IMPHASH 3abe26b5c310a8d2f779f5622197ac49
SHA256 006b1f025e75c853f3e776dd579791d6ac479bc25a6f0bbec92af86a149dffd8
MD5 116c0e8343a4bd13c60bc0982664ceb6
SHA1 85fd3e2e9a30a3ff0e2ae416ae86decbd43b0f48
SHA512 cf8ffa44bca15adabbefd217f451ba9c99fd6c8baa8291928394bbdd716f007915217c1cd6d85b714b25ced1ca2df4f31693d30bd1022fbf46d5fb142dd24a3d
SSDEEP 6144:5XI5XL/kxUU+x6NmM2rfATVyYM1MbYA4uGe55/eeTt4iqB/7fBjmSWFy:5X0LkxUU+cF4fATtMoFeeeiqBbCy
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW RaiseException LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP IsValidCodePage CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing