file[.]exe | Triage™

General

Target
file.exe
Size 287KB
Sample221030-1m7dnacah2
SHA256 56d229d96227637bb52ff54b1f4afcaff3f0b49df5eb4230cfcb4b9d34c1449d
MD5 7c00204fff59a86ee1d7ac437aa5a503
SHA1 1576a0dd76929a47008e33146c491501144f20fd
SHA512 9db63345da03c579ec5650650c66c89484f958883192e799dcbec9d5b7270eaf9f25f0969d16a5715ba668356eeea47807f14397fb010e9273de3482c44f12e4
SSDEEP 6144:1ULv7Lbjqa0GMASU6hStnSsFkyMZbMcE1lLLf27ITsq:1ULz7SrD4SsFknbMP1c7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 287KB

file.exe

IMPHASH b736459b86e3a81d3c8753126e954e9d
SHA256 56d229d96227637bb52ff54b1f4afcaff3f0b49df5eb4230cfcb4b9d34c1449d
MD5 7c00204fff59a86ee1d7ac437aa5a503
SHA1 1576a0dd76929a47008e33146c491501144f20fd
SHA512 9db63345da03c579ec5650650c66c89484f958883192e799dcbec9d5b7270eaf9f25f0969d16a5715ba668356eeea47807f14397fb010e9273de3482c44f12e4
SSDEEP 6144:1ULv7Lbjqa0GMASU6hStnSsFkyMZbMcE1lLLf27ITsq:1ULz7SrD4SsFknbMP1c7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19346

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID GetThreadContext WriteConsoleInputW lstrlenA GetConsoleAliasesLengthW MoveFileExA SetEndOfFile InterlockedIncrement SetComputerNameW GetFileAttributesExA GetModuleHandleW GetTickCount GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW WriteFile GlobalAlloc GetSystemDirectoryW LoadLibraryW Sleep AssignProcessToJobObject GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW GetFileAttributesW WriteConsoleW LCMapStringA GetLastError GetProcAddress VirtualAlloc FreeUserPhysicalPages LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA GetModuleHandleA CreateMutexA FindNextFileW ReadConsoleInputW LCMapStringW HeapAlloc ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

Sharing