file[.]exe | Triage™

General

Target
file.exe
Size 325KB
Sample221031-cbjlfsagfm
SHA256 7f9482e4d05dc1727c315fd2d2d4bb32c8a51c9bcb45262b461237eafb48169b
MD5 95b8f93430a6f5f81e8e17f9fefb16ec
SHA1 716b7329b5b5248cb92ca72f44069ba7386d561c
SHA512 ffadf82a7ff2e593d150c55ad08b5be49d5b424bfab2aa9aead5d44303d9fd80c1f54aa837559dae4129edd1ff7b34deff156fd456f7f8eec693be88187ac477
SSDEEP 6144:thCV3+LK/2TNEGmKmq0MMMMMMOF47ITsq:thCUG/2TNrmKm3MMMMMMd7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 325KB

file.exe

IMPHASH 527d89b2056bd8c3abd9712a53dad1df
SHA256 7f9482e4d05dc1727c315fd2d2d4bb32c8a51c9bcb45262b461237eafb48169b
MD5 95b8f93430a6f5f81e8e17f9fefb16ec
SHA1 716b7329b5b5248cb92ca72f44069ba7386d561c
SHA512 ffadf82a7ff2e593d150c55ad08b5be49d5b424bfab2aa9aead5d44303d9fd80c1f54aa837559dae4129edd1ff7b34deff156fd456f7f8eec693be88187ac477
SSDEEP 6144:thCV3+LK/2TNEGmKmq0MMMMMMOF47ITsq:thCUG/2TNrmKm3MMMMMMd7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19267

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID GetThreadContext WriteConsoleInputW lstrlenA GetConsoleAliasesLengthW MoveFileExA SetEndOfFile InterlockedIncrement SetComputerNameW GetFileAttributesExA GetModuleHandleW GetTickCount GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW WriteFile GlobalAlloc GetSystemDirectoryW LoadLibraryW Sleep AssignProcessToJobObject GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW GetFileAttributesW WriteConsoleW LCMapStringA GetLastError GetProcAddress VirtualAlloc FreeUserPhysicalPages LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA GetModuleHandleA CreateMutexA FindNextFileW ReadConsoleInputW LCMapStringW HeapAlloc ExitProcess GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers GetProcessHeap ReadFile RaiseException

Sharing