file[.]exe | Triage™

General

Target
file.exe
Size 292KB
Sample221103-elscfsecf9
SHA256 d17f4b78babab9d2a93c3dbcec5c77b949cdb13a5fb653fdff19263073b7a0a9
MD5 bd8f00d5443c21442f9e9ee7dc656504
SHA1 87335c5e32b8a6609e5e53e50ee47c2167f21f37
SHA512 cdf302e8fccbcf638cea64764a4caa22372beca60a89ede6fb3a6be47cb481925cad5de05945d85ad2af515f95f48431b783bff0344ccc8a7c0942bc0a7b8f43
SSDEEP 3072:rfBHDRLt1Sytwk57VTeS81oMGbz13KlMeFX8zQyc8zj+g1TlBy:7BtL6fmVaSgoMsz13KjFX8cy5/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 292KB

file.exe

IMPHASH babefe8ee1a998f9b022d1c5e07ae8f5
SHA256 d17f4b78babab9d2a93c3dbcec5c77b949cdb13a5fb653fdff19263073b7a0a9
MD5 bd8f00d5443c21442f9e9ee7dc656504
SHA1 87335c5e32b8a6609e5e53e50ee47c2167f21f37
SHA512 cdf302e8fccbcf638cea64764a4caa22372beca60a89ede6fb3a6be47cb481925cad5de05945d85ad2af515f95f48431b783bff0344ccc8a7c0942bc0a7b8f43
SSDEEP 3072:rfBHDRLt1Sytwk57VTeS81oMGbz13KlMeFX8zQyc8zj+g1TlBy:7BtL6fmVaSgoMsz13KjFX8cy5/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA WriteConsoleInputA SleepEx GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetFileAttributesA GetConsoleAliasW WriteConsoleW CreateMutexW GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetComputerNameA LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA FindNextFileA GetModuleHandleA FindNextFileW ReadConsoleInputW LCMapStringW ReadFile GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing