file[.]exe | Triage™

General

Target
file.exe
Size 255KB
Sample221026-ddv8pseeg2
SHA256 6b550333d8e92f5c25875a7c6081f50cdffc3fc3401d5ec4ced2c0186d9583be
MD5 a32a8500b1fdad45441c21f43c621735
SHA1 58f3984469801daa0bf8809b47bd735760ec3753
SHA512 b4fa3543f6ee401c5575cd5ab32e07ed547f2dcb30b8eeb2a3727cb5f5235b80e3b2f33bf40f49d3f52c2d6e7e3ae90e3cbc3ef2cf8954afafa3e87e6f181a4c
SSDEEP 3072:zXKmWDoenFLAyCwONRgs+ERGNKWVk+rBHAj3+J6VKz6EXrukfhElaNR1sKk:ruDo8FLJIRgs+jrgj3A6QztakfK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 255KB

file.exe

IMPHASH 3abe26b5c310a8d2f779f5622197ac49
SHA256 6b550333d8e92f5c25875a7c6081f50cdffc3fc3401d5ec4ced2c0186d9583be
MD5 a32a8500b1fdad45441c21f43c621735
SHA1 58f3984469801daa0bf8809b47bd735760ec3753
SHA512 b4fa3543f6ee401c5575cd5ab32e07ed547f2dcb30b8eeb2a3727cb5f5235b80e3b2f33bf40f49d3f52c2d6e7e3ae90e3cbc3ef2cf8954afafa3e87e6f181a4c
SSDEEP 3072:zXKmWDoenFLAyCwONRgs+ERGNKWVk+rBHAj3+J6VKz6EXrukfhElaNR1sKk:ruDo8FLJIRgs+jrgj3A6QztakfK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW RaiseException LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetOEMCP FindNextFileA GetModuleHandleA CreateMutexA SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP IsValidCodePage CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing