file[.]exe | Triage™

General

Target
file.exe
Size 256KB
Sample221027-glwe8abah4
SHA256 5f3314f8e9b201972b6e685c80d10a51b421abaa8699eb8cc3f08fc3f52f4f8d
MD5 121c80b88536276905c85fcb8b5e1dbf
SHA1 b7800d410d392123f8f6c996d18a1d9f4dc63097
SHA512 aeefed89a6be321763df36b87bdc411795e6678c5f6cf6e4186756e6447f33bdaa122d156f5b9dfaf8144a4e91e3a55b17813973d51bcf788a6df4c3d317c5ec
SSDEEP 3072:pXihFumr3/n8UigpTiEKkRvyqXz9rd17eAPCyPHyw3DxxOwBh:NWumr33ZiErn3de0C8B37X
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 256KB

file.exe

IMPHASH ce5bfe8f00bb2225d4db9db30ca61940
SHA256 5f3314f8e9b201972b6e685c80d10a51b421abaa8699eb8cc3f08fc3f52f4f8d
MD5 121c80b88536276905c85fcb8b5e1dbf
SHA1 b7800d410d392123f8f6c996d18a1d9f4dc63097
SHA512 aeefed89a6be321763df36b87bdc411795e6678c5f6cf6e4186756e6447f33bdaa122d156f5b9dfaf8144a4e91e3a55b17813973d51bcf788a6df4c3d317c5ec
SSDEEP 3072:pXihFumr3/n8UigpTiEKkRvyqXz9rd17eAPCyPHyw3DxxOwBh:NWumr33ZiErn3de0C8B37X
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29968

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage CreateFileA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP

Sharing