file[.]exe | Triage™

General

Target
file.exe
Size 286KB
Sample221030-wgv18aceh2
SHA256 5bf5fbfdc2ccc58cbcfdc331b2fc8c8e516cd8d8f3bb348d588cdc8e3162507e
MD5 11d4d261df3bd707715cdae703e27e6e
SHA1 7692a4be1716045256089402db4bb50f4b01baf1
SHA512 d03ce3f91c6fae5aac101a55217fe7233eb1faebe24b0e1a5113b5052a824646245091c310f755a4a1d9be1afd07e9571f66e8fdf3e25f5ee99884c9c5e5b602
SSDEEP 6144:XUN4Lh0yQN6/veJeF/sk3zP04WyN7ITsq:XUmRM60eFEGbDWyN7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 286KB

file.exe

IMPHASH 7d5676b584c8b188f801820b26b73263
SHA256 5bf5fbfdc2ccc58cbcfdc331b2fc8c8e516cd8d8f3bb348d588cdc8e3162507e
MD5 11d4d261df3bd707715cdae703e27e6e
SHA1 7692a4be1716045256089402db4bb50f4b01baf1
SHA512 d03ce3f91c6fae5aac101a55217fe7233eb1faebe24b0e1a5113b5052a824646245091c310f755a4a1d9be1afd07e9571f66e8fdf3e25f5ee99884c9c5e5b602
SSDEEP 6144:XUN4Lh0yQN6/veJeF/sk3zP04WyN7ITsq:XUmRM60eFEGbDWyN7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19169

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID ExitProcess lstrlenA GetConsoleAliasesLengthW SetEndOfFile InterlockedIncrement SetComputerNameW GetFileAttributesExA GetTickCount GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW WriteFile GlobalAlloc LoadLibraryW Sleep AssignProcessToJobObject GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW GetFileAttributesW WriteConsoleW LCMapStringA GetLastError GetProcAddress VirtualAlloc FreeUserPhysicalPages LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA GetModuleHandleA CreateMutexA FindNextFileW LCMapStringW HeapAlloc GetModuleHandleW GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

Sharing