file[.]exe | Triage™

General

Target
file.exe
Size 314KB
Sample221230-bsdk4aef68
SHA256 5b4e79ecc636c607ede36df7f69e20e87ab4a7cf177a0ffb61f93eee03561d83
MD5 3118daa711b7ebf0bf74cfaf15b23093
SHA1 a0a422548edbeea64a0d4f08277592f1efdce8dc
SHA512 064c2c4021735048fe1ecb90f4ec772e7fd22795e10d66a460034429e3bae716cc4cf4c8642c9d578b29b611c6614c3aa802d768aa6faab7c8f175fdc2bbe2d4
SSDEEP 3072:BXv6LLUK5L9HDP9cTDYGfyP/XExI3wWgj4c0D6hENrOKbIxe01Cz5Mqdqujodd/5:ULLl4GE66H02vyIxZ1WqqdS49
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 314KB

file.exe

IMPHASH 71a542e5a6441ac64e119a984b666b26
SHA256 5b4e79ecc636c607ede36df7f69e20e87ab4a7cf177a0ffb61f93eee03561d83
MD5 3118daa711b7ebf0bf74cfaf15b23093
SHA1 a0a422548edbeea64a0d4f08277592f1efdce8dc
SHA512 064c2c4021735048fe1ecb90f4ec772e7fd22795e10d66a460034429e3bae716cc4cf4c8642c9d578b29b611c6614c3aa802d768aa6faab7c8f175fdc2bbe2d4
SSDEEP 3072:BXv6LLUK5L9HDP9cTDYGfyP/XExI3wWgj4c0D6hENrOKbIxe01Cz5Mqdqujodd/5:ULLl4GE66H02vyIxZ1WqqdS49
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14440

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA EndUpdateResourceW ReadConsoleA GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetTickCount TlsSetValue LoadLibraryW GetConsoleAliasW WriteConsoleW MultiByteToWideChar LCMapStringA InterlockedExchange SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA GetProcessWorkingSetSize OpenWaitableTimerW SetConsoleDisplayMode LockResource SetCommMask GetModuleHandleA OpenFileMappingW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree InterlockedIncrement InterlockedDecrement DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW

user32

WindowFromDC

Sharing