file[.]exe | Triage™

General

Target
file.exe
Size 269KB
Sample221027-lkxdcabgdp
SHA256 9704c25a699d37f70abbfa396b8f2c8a94432326dc4ef4dd0e92a0d28e19fe59
MD5 be1bbd82c143cf96734a3c1010b9495e
SHA1 0769aa55ffe144d8edb858681d9cee5182417139
SHA512 18cf7599431fb3d504b3289d482b48d195a70d07b7fa46b54a1c89c4afdf9cb25bae1b5c30853ac6715151b0f96a89c5bcad529e4319b049a2e4737ace803c7f
SSDEEP 3072:XXiog49mT08mTKgFv72XeRU7tsCPmsco0EqrX7zP0r/cf7iaTzwh0KK:HLg4S9evSH1nsEqrHP0r/oiaTMh0r
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 269KB

file.exe

IMPHASH ce5bfe8f00bb2225d4db9db30ca61940
SHA256 9704c25a699d37f70abbfa396b8f2c8a94432326dc4ef4dd0e92a0d28e19fe59
MD5 be1bbd82c143cf96734a3c1010b9495e
SHA1 0769aa55ffe144d8edb858681d9cee5182417139
SHA512 18cf7599431fb3d504b3289d482b48d195a70d07b7fa46b54a1c89c4afdf9cb25bae1b5c30853ac6715151b0f96a89c5bcad529e4319b049a2e4737ace803c7f
SSDEEP 3072:XXiog49mT08mTKgFv72XeRU7tsCPmsco0EqrX7zP0r/cf7iaTzwh0KK:HLg4S9evSH1nsEqrHP0r/oiaTMh0r
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30272

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA lstrlenA SetEndOfFile LoadResource InterlockedDecrement SetFirmwareEnvironmentVariableA SetComputerNameW GetSystemDefaultLCID FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW SetFileShortNameA TerminateJobObject GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage CreateFileA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetProcessHeap ReadFile GetConsoleOutputCP

Sharing