file[.]exe | Triage™

General

Target
file.exe
Size 323KB
Sample221102-3fdtwacff6
SHA256 51a2cbb548155430813ba255fdefea6c96630b0d007e2c3b507c0ab9f032abe7
MD5 20b3b981f929bf3b5c84b07858aa5c88
SHA1 76c683de2cf4dec4dfdcce2f403f301945e69648
SHA512 409b0c4076fb56f01d668d9e8e420f595b599c6d91d4971e47e694c0918559eadf2a41d27bb37dd7d35fbef7ee9a768ff3d37edd2e9811f42f22b5c85982ef1c
SSDEEP 3072:0O/GrLBf/IwWS5XyNOb/6a/he8th7JsvzbhPDdaSZ1NZVggjcGkNIVqILr:T/+LBI7P4bCMz7mzFAQb7ITsq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 323KB

file.exe

IMPHASH cefad7a22bff9bb365ee732415d34af8
SHA256 51a2cbb548155430813ba255fdefea6c96630b0d007e2c3b507c0ab9f032abe7
MD5 20b3b981f929bf3b5c84b07858aa5c88
SHA1 76c683de2cf4dec4dfdcce2f403f301945e69648
SHA512 409b0c4076fb56f01d668d9e8e420f595b599c6d91d4971e47e694c0918559eadf2a41d27bb37dd7d35fbef7ee9a768ff3d37edd2e9811f42f22b5c85982ef1c
SSDEEP 3072:0O/GrLBf/IwWS5XyNOb/6a/he8th7JsvzbhPDdaSZ1NZVggjcGkNIVqILr:T/+LBI7P4bCMz7mzFAQb7ITsq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement WriteConsoleInputA SleepEx GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW CreateMutexW GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetLastError GetProcAddress VirtualAlloc SetComputerNameA LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA OpenJobObjectW FindNextFileA GetModuleHandleA FindNextFileW ReadConsoleInputW LCMapStringW ReadFile GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing