file[.]exe | Triage™

General

Target
file.exe
Size 1.4MB
Sample221202-vj6easff99
SHA256 e774b64170ea54274f9193e871da0412fa53835451f2f26277d9a474ff1ae7d5
MD5 05c5dc2cf2e45d2209a1f583a256c792
SHA1 d549e0a7561335ac03aca3d63d35061737e2b5e6
SHA512 ccf76efb0ad9c1abc1b364ab171bb79aee5120a322d6596eacae4e5f8d7aa8b7dd6a4a6b0c7276b23a5ff3bcfa471c11a0e38fb3ed688eb7baf618ade0c7143a
SSDEEP 24576:Dp+XtrPZzdV8uQaBRua7hrCHQYj2HsLzFXiyVrbpLMfvv8mJ3+LJjKMf:DatrRxJQq4U0pj2Hs0gLkkmB+Df
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 1.4MB

file.exe

IMPHASH 8cba43c1bf0bf3e468808ba9c060bbfd
SHA256 e774b64170ea54274f9193e871da0412fa53835451f2f26277d9a474ff1ae7d5
MD5 05c5dc2cf2e45d2209a1f583a256c792
SHA1 d549e0a7561335ac03aca3d63d35061737e2b5e6
SHA512 ccf76efb0ad9c1abc1b364ab171bb79aee5120a322d6596eacae4e5f8d7aa8b7dd6a4a6b0c7276b23a5ff3bcfa471c11a0e38fb3ed688eb7baf618ade0c7143a
SSDEEP 24576:Dp+XtrPZzdV8uQaBRua7hrCHQYj2HsLzFXiyVrbpLMfvv8mJ3+LJjKMf:DatrRxJQq4U0pj2Hs0gLkkmB+Df
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

5d:bc:0a:d4:70:8c:bf:31:00:e3:34:4e:34:89:a9:e7:eb:f0:fc:89:65:8b:89:2b:08:98:93:ed:86:4f:58:0d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

76084

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess GetCommandLineW lstrcmpA TlsGetValue HeapAlloc GetCurrentProcess GetTickCount GetCurrentThread GetProcessHeap IsBadReadPtr GetUserDefaultLangID GetCommandLineA GetConsoleCP LoadLibraryW Sleep GetProcessHandleCount HeapCreate GetAtomNameW GetBinaryTypeW VerifyVersionInfoW GetLastError SetLastError GetProcessHeaps IsValidCodePage GetCommMask GetModuleHandleA GetThreadId GetStringTypeW GetConsoleTitleW GetCurrentThreadId DeleteFileW GetCurrentProcessId GetThreadUILanguage CreateFileW WriteConsoleW FlushFileBuffers LCMapStringEx SetThreadStackGuarantee GetSystemInfo VirtualAlloc VirtualProtect VirtualQuery EncodePointer DecodePointer ReadFile GetSystemTimeAsFileTime RaiseException RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent InterlockedDecrement GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar GetStdHandle WriteFile GetModuleFileNameW EnterCriticalSection LeaveCriticalSection GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection InitOnceExecuteOnce GetStartupInfoW HeapSize GetConsoleMode ReadConsoleW InterlockedIncrement HeapFree SetFilePointer SetFilePointerEx CloseHandle QueryPerformanceCounter GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree TerminateProcess GetModuleHandleW LoadLibraryExW GetACP GetOEMCP GetCPInfo OutputDebugStringW WideCharToMultiByte HeapReAlloc SetStdHandle SetEndOfFile

user32

wsprintfW GetForegroundWindow GetSysColor MessageBoxW

ole32

CoGetCurrentProcess

Sharing