file[.]exe | Triage™

General

Target
file.exe
Size 428KB
Sample221114-xw29hsdb38
SHA256 e227b4566ed90c9f0460c3da94db0d6aa09628c586d7df41554bd4d079775960
MD5 b75514a909e3d3ebc3267d3ff9c509be
SHA1 2bc8dc95572f7f3185061f5c12d653beecf9e1d6
SHA512 9c269dd5d0e1722d3ee9341637b0b6d795ffc90db1509594e2f520c17a2d4621078e1092d38beb24adf18c4f1dc28d24ba2e12aa4b72305bab930a450de307ce
SSDEEP 6144:niXqUyLOGJiOzKln0EnCFo7sKQTm5f0jrHWIsB+uWwe3EndTQ:niWhiOzYHnCFasKEm5f0jrH3Nt3UdT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 428KB

file.exe

IMPHASH 20d0a6050daabe2704c95b6dd23a806a
SHA256 e227b4566ed90c9f0460c3da94db0d6aa09628c586d7df41554bd4d079775960
MD5 b75514a909e3d3ebc3267d3ff9c509be
SHA1 2bc8dc95572f7f3185061f5c12d653beecf9e1d6
SHA512 9c269dd5d0e1722d3ee9341637b0b6d795ffc90db1509594e2f520c17a2d4621078e1092d38beb24adf18c4f1dc28d24ba2e12aa4b72305bab930a450de307ce
SSDEEP 6144:niXqUyLOGJiOzKln0EnCFo7sKQTm5f0jrHWIsB+uWwe3EndTQ:niWhiOzYHnCFasKEm5f0jrH3Nt3UdT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26399

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID SetProcessAffinityMask CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW lstrlenW LCMapStringA GetConsoleAliasesW GetProfileIntA GetLastError GetProcAddress VirtualAlloc SetComputerNameA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile RaiseException GetConsoleOutputCP

Sharing