file[.]exe | Triage™

General

Target
file.exe
Size 256KB
Sample221027-g2819abcaj
SHA256 576ffcef61d05463d0ea4c6ccb923438b8f651479701d37ec20c7bc1898002df
MD5 0037ef6553c450d63ac03cbab7d985d1
SHA1 f61aea1512adb9e0adaefdb46204168d7c8b4917
SHA512 1b5a27cd7fbd2bbaa2e9a809be7f2503ef08f98fe91b111b373ce8c03c2fa9b7bb1d6e2d66bdba805dc4c190b3b786521f9d69de1b461d7ef1548783d2f06af6
SSDEEP 3072:gXiSntdXCuG80Y5DTLKeRvf/JJrXA6Afcj6RuxJ6oGKD5kH5U2RkRsUHZJWcth:UfntdXtPLhH064nRuePKDoRkRsKzWcD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 256KB

file.exe

IMPHASH ce5bfe8f00bb2225d4db9db30ca61940
SHA256 576ffcef61d05463d0ea4c6ccb923438b8f651479701d37ec20c7bc1898002df
MD5 0037ef6553c450d63ac03cbab7d985d1
SHA1 f61aea1512adb9e0adaefdb46204168d7c8b4917
SHA512 1b5a27cd7fbd2bbaa2e9a809be7f2503ef08f98fe91b111b373ce8c03c2fa9b7bb1d6e2d66bdba805dc4c190b3b786521f9d69de1b461d7ef1548783d2f06af6
SSDEEP 3072:gXiSntdXCuG80Y5DTLKeRvf/JJrXA6Afcj6RuxJ6oGKD5kH5U2RkRsUHZJWcth:UfntdXtPLhH064nRuePKDoRkRsKzWcD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29968

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage CreateFileA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP

Sharing