file[.]exe | Triage™

General

Target
file.exe
Size 240KB
Sample221116-27dshsdc65
SHA256 ed39fa2c5e5ceb95ae7d27b3c6353696313d931afa511c6c9ed20fdf3fedc368
MD5 fc6ff9d155e57335b1675cd0a2d23aa0
SHA1 17150542448fd1ba2327d91367b9d6e92b2f9d43
SHA512 c14e38ed6b8eb97e9215786401078b28d5e6424e31fd0fc53e30464f455a703e610a5e8b852c6a2c5b09b7ebf4e7209de085c58049b146aa19218048e9d2129d
SSDEEP 6144:NEpZLWVp8yQ8UkVmRh5bSFdjykfrMLixGb:N+Zyj8yQ0mtbSFxnA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 240KB

file.exe

IMPHASH 18530b33deef5549fbfeb0377c00b762
SHA256 ed39fa2c5e5ceb95ae7d27b3c6353696313d931afa511c6c9ed20fdf3fedc368
MD5 fc6ff9d155e57335b1675cd0a2d23aa0
SHA1 17150542448fd1ba2327d91367b9d6e92b2f9d43
SHA512 c14e38ed6b8eb97e9215786401078b28d5e6424e31fd0fc53e30464f455a703e610a5e8b852c6a2c5b09b7ebf4e7209de085c58049b146aa19218048e9d2129d
SSDEEP 6144:NEpZLWVp8yQ8UkVmRh5bSFdjykfrMLixGb:N+Zyj8yQ0mtbSFxnA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27802

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessAffinityMask WriteConsoleOutputCharacterW GetStringTypeA WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount SetCommState GetVolumePathNameW GetPrivateProfileIntA SetFileShortNameW LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW FillConsoleOutputCharacterA GetLastError GetProcAddress VirtualAlloc CopyFileA EnumSystemCodePagesW LoadLibraryA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringW GetConsoleAliasesW GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile RaiseException

advapi32

BackupEventLogW

Sharing