file[.]exe | Triage™

General

Target
file.exe
Size 387KB
Sample221027-hal8vabcfl
SHA256 48c132b5b5af641ca100d6ae118603b4bc0c59b09a398db330c714f2e64398d4
MD5 470f84d7f622f1434509dcd7409dc105
SHA1 faff5f0ca6fb359deae2218e6a3b316f63d79c8c
SHA512 38a8251a03fca5a7457be749756fdac56ac9bbe9a441f1b8c918a26da6545e2a8d3635441adb760c31a27e363fa5af9195dc1d0dcfa227585af687cdaaf3bea4
SSDEEP 6144:DumgstGwF551ZHpwx2AspkTKTaPtkMwi58DF5ZP/jJi0bOql6Lv:Dumg/wF55LH4FyuPtkrZ5lJi0Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 387KB

file.exe

IMPHASH ce5bfe8f00bb2225d4db9db30ca61940
SHA256 48c132b5b5af641ca100d6ae118603b4bc0c59b09a398db330c714f2e64398d4
MD5 470f84d7f622f1434509dcd7409dc105
SHA1 faff5f0ca6fb359deae2218e6a3b316f63d79c8c
SHA512 38a8251a03fca5a7457be749756fdac56ac9bbe9a441f1b8c918a26da6545e2a8d3635441adb760c31a27e363fa5af9195dc1d0dcfa227585af687cdaaf3bea4
SSDEEP 6144:DumgstGwF551ZHpwx2AspkTKTaPtkMwi58DF5ZP/jJi0bOql6Lv:Dumg/wF55LH4FyuPtkrZ5lJi0Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29968

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage CreateFileA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP

Sharing