file[.]exe | Triage™

General

Target
file.exe
Size 255KB
Sample221027-hpsdeabcf9
SHA256 83199c20486d9e4275b97bbbd5e32a6d462ec2cdb7e81c08e7ec47fb7cb579d5
MD5 cc3d3018fa2079d733922d142d5d0c87
SHA1 ae74486c51333061e74773c66401456148b22435
SHA512 24118058a6bcfe77d0faf84bd05ecba9fb559885d0090ddde006e379025455f02899c98eda5adafdcbd496af60cf818e8978221964e441e412497c882118d673
SSDEEP 3072:PXiLK/tIeg8dqpDGdKXRf04V5xbObCmdEHuJ57Jhb2L9trNvOVlUVUWsl2WFsrbF:/b/tiadU04LGdXT2L9trNvOVlUVIc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 255KB

file.exe

IMPHASH ce5bfe8f00bb2225d4db9db30ca61940
SHA256 83199c20486d9e4275b97bbbd5e32a6d462ec2cdb7e81c08e7ec47fb7cb579d5
MD5 cc3d3018fa2079d733922d142d5d0c87
SHA1 ae74486c51333061e74773c66401456148b22435
SHA512 24118058a6bcfe77d0faf84bd05ecba9fb559885d0090ddde006e379025455f02899c98eda5adafdcbd496af60cf818e8978221964e441e412497c882118d673
SSDEEP 3072:PXiLK/tIeg8dqpDGdKXRf04V5xbObCmdEHuJ57Jhb2L9trNvOVlUVUWsl2WFsrbF:/b/tiadU04LGdXT2L9trNvOVlUVIc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29952

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage CreateFileA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP

Sharing