file[.]exe | Triage™

General

Target
file.exe
Size 323KB
Sample221102-raznlsbhdj
SHA256 d2a3379a95cf890e4f8a739171aca247cd9cc40c90262d4eb42dccf9b420c59d
MD5 85d257ab9a73bf18b4bfef91167328b9
SHA1 6e1f387a43493671ca3805769209c408df1c586f
SHA512 2f56431f5e59b98a9dbac4460a4480f81bfbd5b08c5dfe48f12c3b8cf4f8aaf4d355a0c110760911923267426009f0a21e98b924dbb3348077205af6ee9d2f9b
SSDEEP 6144:Z8remhkNvcQwxt2Z14oR4EM2jJFlSWQm7ITsq:Z8dhkFcQaT0j9T7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 323KB

file.exe

IMPHASH 3d675596ca8e40a75b4d427a316299a8
SHA256 d2a3379a95cf890e4f8a739171aca247cd9cc40c90262d4eb42dccf9b420c59d
MD5 85d257ab9a73bf18b4bfef91167328b9
SHA1 6e1f387a43493671ca3805769209c408df1c586f
SHA512 2f56431f5e59b98a9dbac4460a4480f81bfbd5b08c5dfe48f12c3b8cf4f8aaf4d355a0c110760911923267426009f0a21e98b924dbb3348077205af6ee9d2f9b
SSDEEP 6144:Z8remhkNvcQwxt2Z14oR4EM2jJFlSWQm7ITsq:Z8dhkFcQaT0j9T7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17313

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement WaitNamedPipeA WriteConsoleInputA GetModuleHandleW GetGeoInfoW GlobalAlloc LoadLibraryW Sleep GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW ReadFile GetSystemDirectoryA GetVolumePathNameA LCMapStringA SetThreadContext GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW AddAtomW CreateEventW OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW ReadConsoleInputW LCMapStringW GetLastError GetSystemDefaultLangID HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

Sharing