file[.]exe | Triage™

General

Target
file.exe
Size 308KB
Sample221114-reyxwaca53
SHA256 ec4d4cbe7e0ad20c33c4a1e7930ec1b853dfc84d0ff2d45bfb53e4503dea6121
MD5 4502ec177734c445e98687f05460bdf8
SHA1 04b527432a13a4a8ab880d9b0f267c37f221e77a
SHA512 c8eb239d36a4cabc7f1626a81035b2c2c8ac8dce8becec2eb7ccc329b0a739e4ff0839921c04758b8d77c878258e250a6e56b50c6c4911c59ab3d3ea518e1eda
SSDEEP 6144:Eq97LjFOKlbnh15S3pXF/iDuKkEn2E1a:EqV3FOKxnh1sEuzUv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 308KB

file.exe

IMPHASH 3ede86ea15bd6a919edb55c89cba6a2d
SHA256 ec4d4cbe7e0ad20c33c4a1e7930ec1b853dfc84d0ff2d45bfb53e4503dea6121
MD5 4502ec177734c445e98687f05460bdf8
SHA1 04b527432a13a4a8ab880d9b0f267c37f221e77a
SHA512 c8eb239d36a4cabc7f1626a81035b2c2c8ac8dce8becec2eb7ccc329b0a739e4ff0839921c04758b8d77c878258e250a6e56b50c6c4911c59ab3d3ea518e1eda
SSDEEP 6144:Eq97LjFOKlbnh15S3pXF/iDuKkEn2E1a:EqV3FOKxnh1sEuzUv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26383

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID SetProcessAffinityMask GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA CreateHardLinkA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc SetComputerNameA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile RaiseException GetConsoleOutputCP WriteConsoleW

Sharing