file[.]exe | Triage™

General

Target
file.exe
Size 326KB
Sample221031-cazahsagfk
SHA256 65aeb9f90f49e3bf4b5d78cb4843464f9dbed2a39244a0e9a0a73f7eb71899ba
MD5 cf4fae22a57b4f4aa82f00c61fd247f3
SHA1 9f4137f3206565713d1d12628f61b8b23ecce9d8
SHA512 50bebd3e8ed7e9f7809a363ff5d9e6c434d032d898879c786c92c8f0f702abdc0bc5c7f60adb59f48eb9dd29fc0f5a9713a8ce5f21a5523ed1bd86c1fd4eb26a
SSDEEP 6144:pheV0NLfrM8vEKMeRmwln86KJWv7ITsq:pheKjrM4vl86jv7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 326KB

file.exe

IMPHASH 527d89b2056bd8c3abd9712a53dad1df
SHA256 65aeb9f90f49e3bf4b5d78cb4843464f9dbed2a39244a0e9a0a73f7eb71899ba
MD5 cf4fae22a57b4f4aa82f00c61fd247f3
SHA1 9f4137f3206565713d1d12628f61b8b23ecce9d8
SHA512 50bebd3e8ed7e9f7809a363ff5d9e6c434d032d898879c786c92c8f0f702abdc0bc5c7f60adb59f48eb9dd29fc0f5a9713a8ce5f21a5523ed1bd86c1fd4eb26a
SSDEEP 6144:pheV0NLfrM8vEKMeRmwln86KJWv7ITsq:pheKjrM4vl86jv7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19283

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID GetThreadContext WriteConsoleInputW lstrlenA GetConsoleAliasesLengthW MoveFileExA SetEndOfFile InterlockedIncrement SetComputerNameW GetFileAttributesExA GetModuleHandleW GetTickCount GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW WriteFile GlobalAlloc GetSystemDirectoryW LoadLibraryW Sleep AssignProcessToJobObject GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW GetFileAttributesW WriteConsoleW LCMapStringA GetLastError GetProcAddress VirtualAlloc FreeUserPhysicalPages LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA GetModuleHandleA CreateMutexA FindNextFileW ReadConsoleInputW LCMapStringW HeapAlloc ExitProcess GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers GetProcessHeap ReadFile RaiseException

Sharing