file[.]exe | Triage™

General

Target
file.exe
Size 255KB
Sample221027-e64afsaff6
SHA256 78925e5eb4ecc556410f6a02a849259967d624e37e3530702ef54aca517cfffb
MD5 99bf8675d62a38dd6fcc93993f5269c2
SHA1 e15fca2c90cba746071ea1705015a111eddb78e2
SHA512 94a51954ce648e719b0081ff82f3470b02f7a81e6480a8bad36177982f39eebd951e7306a8e12419f31a9ff589a0217f0c1cc33fb92312975fadece36a95d73d
SSDEEP 3072:oXi59kAiWMu8Ntl1OoKORv/7bG02vbNNPi/0Ghdyv0FwDKDs/7LlUn3h:8Y9kAiPooF/7bJ2jNR20Gy8oKM7LM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 255KB

file.exe

IMPHASH ce5bfe8f00bb2225d4db9db30ca61940
SHA256 78925e5eb4ecc556410f6a02a849259967d624e37e3530702ef54aca517cfffb
MD5 99bf8675d62a38dd6fcc93993f5269c2
SHA1 e15fca2c90cba746071ea1705015a111eddb78e2
SHA512 94a51954ce648e719b0081ff82f3470b02f7a81e6480a8bad36177982f39eebd951e7306a8e12419f31a9ff589a0217f0c1cc33fb92312975fadece36a95d73d
SSDEEP 3072:oXi59kAiWMu8Ntl1OoKORv/7bG02vbNNPi/0Ghdyv0FwDKDs/7LlUn3h:8Y9kAiPooF/7bJ2jNR20Gy8oKM7LM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29968

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage CreateFileA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP

Sharing