file[.]exe | Triage™

General

Target
file.exe
Size 391KB
Sample221027-l3x3labge2
SHA256 84ef62dbf08c9ac3346ad69badd6cbe783ab32fe68c2af3a37fbb81a7b5e51bd
MD5 b648b4246cb37c871ef7511670c09e04
SHA1 b8b82d103d975b184709bf32c3884b7d49f7cb76
SHA512 c4854adde3cf02d38670adfa2a2a39a3108978a9e3d1e238628934afa1de2269cc78dd854fedc4cab5989c68ff65917e617bfbb1a0de8a3368349d50c60fbe7a
SSDEEP 6144:/KyJzSnM2rddMnBJAdXB8GjWg/+TiYpQxSPav2VV8Xtnn0:/FJzSnModMnBGdXpjboOxSPToXt0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 391KB

file.exe

IMPHASH dfa52f298c509a6aae3ebcae34cf9adf
SHA256 84ef62dbf08c9ac3346ad69badd6cbe783ab32fe68c2af3a37fbb81a7b5e51bd
MD5 b648b4246cb37c871ef7511670c09e04
SHA1 b8b82d103d975b184709bf32c3884b7d49f7cb76
SHA512 c4854adde3cf02d38670adfa2a2a39a3108978a9e3d1e238628934afa1de2269cc78dd854fedc4cab5989c68ff65917e617bfbb1a0de8a3368349d50c60fbe7a
SSDEEP 6144:/KyJzSnM2rddMnBJAdXB8GjWg/+TiYpQxSPav2VV8Xtnn0:/FJzSnModMnBGdXpjboOxSPToXt0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27424

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID GetVolumeNameForVolumeMountPointA lstrlenA MoveFileExA SetEndOfFile LoadResource InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType GetLastError SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA FlushFileBuffers GetProcessHeap MultiByteToWideChar ReadFile LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP

Sharing