file[.]exe | Triage™

General

Target
file.exe
Size 293KB
Sample221103-fn5agaefd4
SHA256 348caf4b22a99d589c4dcb2f774ab787d4a2139f2a8379f0a9d4eec6d4f0b767
MD5 90c0a50bd1ba71a5a446ba5ef7db1ce2
SHA1 bb6d12c3b3f51458777fa7c79718f6b41981761f
SHA512 0fa4a277b8967f959a6864eab15d1a03d58e1913a0ebff497dcf060921acaa341ef2f149ba0ed648446c88e430c631c3639ba0d15899428b7d0f1bf26feaab14
SSDEEP 3072:AdBb5bL53hgVPk574ncqYTnVL/NjBAKM91LKp0xn9O6s0M:kBlLrqmIglFjeKM60xn4Z
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 293KB

file.exe

IMPHASH babefe8ee1a998f9b022d1c5e07ae8f5
SHA256 348caf4b22a99d589c4dcb2f774ab787d4a2139f2a8379f0a9d4eec6d4f0b767
MD5 90c0a50bd1ba71a5a446ba5ef7db1ce2
SHA1 bb6d12c3b3f51458777fa7c79718f6b41981761f
SHA512 0fa4a277b8967f959a6864eab15d1a03d58e1913a0ebff497dcf060921acaa341ef2f149ba0ed648446c88e430c631c3639ba0d15899428b7d0f1bf26feaab14
SSDEEP 3072:AdBb5bL53hgVPk574ncqYTnVL/NjBAKM91LKp0xn9O6s0M:kBlLrqmIglFjeKM60xn4Z
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA WriteConsoleInputA SleepEx GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetFileAttributesA GetConsoleAliasW WriteConsoleW CreateMutexW GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetComputerNameA LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA FindNextFileA GetModuleHandleA FindNextFileW ReadConsoleInputW LCMapStringW ReadFile GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing