file[.]exe | Triage™

General

Target
file.exe
Size 297KB
Sample221114-vxjsfsha6z
SHA256 81a36ad02046aa389645150aaa22e1a7086ec7f44bd19392f0fec0a9fd9d6ea9
MD5 58c006a686139f1ff833fb46f7cfce78
SHA1 878ed00f2b9c06cc46b6a7c9684ffc4fd8a2d96e
SHA512 ab85f1042459ceabf1bdcbbdf9b99d84eef634421024e4092a0b08d301e759cbcfd281c9a0f88e64dcd04bae2f507bc724b02cb06713fb25b7ba9f5d160c734e
SSDEEP 6144:WSE9LAXOiKjffhKnmpwLQCFUOsOMrYWEndTQ:WSAcXOiarpwkROrcUdT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 297KB

file.exe

IMPHASH 20d0a6050daabe2704c95b6dd23a806a
SHA256 81a36ad02046aa389645150aaa22e1a7086ec7f44bd19392f0fec0a9fd9d6ea9
MD5 58c006a686139f1ff833fb46f7cfce78
SHA1 878ed00f2b9c06cc46b6a7c9684ffc4fd8a2d96e
SHA512 ab85f1042459ceabf1bdcbbdf9b99d84eef634421024e4092a0b08d301e759cbcfd281c9a0f88e64dcd04bae2f507bc724b02cb06713fb25b7ba9f5d160c734e
SSDEEP 6144:WSE9LAXOiKjffhKnmpwLQCFUOsOMrYWEndTQ:WSAcXOiarpwkROrcUdT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26399

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID SetProcessAffinityMask CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW lstrlenW LCMapStringA GetConsoleAliasesW GetProfileIntA GetLastError GetProcAddress VirtualAlloc SetComputerNameA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile RaiseException GetConsoleOutputCP

Sharing