file[.]exe | Triage™

General

Target
file.exe
Size 324KB
Sample221102-1eq2pseeck
SHA256 5bbaa92a773f2f47ea88b85e38ef2a498346669e2b225c4878dc4f14b4edc2c3
MD5 87e1a0261bc27a2676177c1c3ac75ffa
SHA1 e6094cc42bb4dcb166d078b419cc7b6f76f89645
SHA512 154bfd3c14b7851b1bc39a1853b315155ef4d32624b7c034ee79e567a38f084b970be75f0d566d3a92bbfd309a3e4ba82cd498f1095e72a84cca63d450069c0e
SSDEEP 3072:cIb/rmL/t/f5WS51H0cbI4gEACxciuiXMsJlvyDvA2MO+h/uG6wkVggjcGkNIVqa:J/qL/dAeU5EACxduHQtSMpf6V7ITsq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 324KB

file.exe

IMPHASH cefad7a22bff9bb365ee732415d34af8
SHA256 5bbaa92a773f2f47ea88b85e38ef2a498346669e2b225c4878dc4f14b4edc2c3
MD5 87e1a0261bc27a2676177c1c3ac75ffa
SHA1 e6094cc42bb4dcb166d078b419cc7b6f76f89645
SHA512 154bfd3c14b7851b1bc39a1853b315155ef4d32624b7c034ee79e567a38f084b970be75f0d566d3a92bbfd309a3e4ba82cd498f1095e72a84cca63d450069c0e
SSDEEP 3072:cIb/rmL/t/f5WS51H0cbI4gEACxciuiXMsJlvyDvA2MO+h/uG6wkVggjcGkNIVqa:J/qL/dAeU5EACxduHQtSMpf6V7ITsq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement WriteConsoleInputA SleepEx GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW CreateMutexW GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetLastError GetProcAddress VirtualAlloc SetComputerNameA LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA OpenJobObjectW FindNextFileA GetModuleHandleA FindNextFileW ReadConsoleInputW LCMapStringW ReadFile GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing