file[.]exe | Triage™

General

Target
file.exe
Size 285KB
Sample221102-e3nqlahcg3
SHA256 f27ce34603fde8869721599a66678b19798a89bf75ef049a9020b4be9b8c8a6d
MD5 1a4139570c542427991fa3434469e536
SHA1 eb65d4e12f775d6f344e39604644138e45dbcf0d
SHA512 927ffd826f1845dc9f50aa278b35b77b4d3af10020bb0b28acbe712d12df05ad3f22b4c8e1ca2528aeb81e5d8293c01f376fd931639be83f06ad38e6f441cf78
SSDEEP 6144:xI+aY4KUG2Pxh5sJkIs/mpDxo1xowixuYH:xItB5usepDUo/TH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 285KB

file.exe

IMPHASH 739a0db3ffe3242d1c4d5a119cbc06b1
SHA256 f27ce34603fde8869721599a66678b19798a89bf75ef049a9020b4be9b8c8a6d
MD5 1a4139570c542427991fa3434469e536
SHA1 eb65d4e12f775d6f344e39604644138e45dbcf0d
SHA512 927ffd826f1845dc9f50aa278b35b77b4d3af10020bb0b28acbe712d12df05ad3f22b4c8e1ca2528aeb81e5d8293c01f376fd931639be83f06ad38e6f441cf78
SSDEEP 6144:xI+aY4KUG2Pxh5sJkIs/mpDxo1xowixuYH:xItB5usepDUo/TH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13925

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind GetLastError SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize HeapReAlloc CreateFileW WriteConsoleW DecodePointer

Sharing